REVOSD_45000021449_20260921[.]rar[.]zip

General

Target
REVOSD_45000021449_20260921.rar.zip
Size 4.6MB
Sample260924-e92wss1y3q
SHA256 d1799738e161b5f69dc60f3344d743f4ba530e67b48c79a16f7411770858446b
MD5 359c58d3c5d8333a7fec15bec3042230
SHA1 548446f85b7f14ce85b2bc17c12cf5adcecbddfd
SHA512 6fc077c699c6952ecb26d8f12527176ef4558e43dbb8a811d0ecab822569a033231e95524f8e0781a240ed686d48a23a6b1cb8c8bf6b31481ae3f6a3b5ba942d
SSDEEP 98304:UZO31StmfX7Ux34jOI0kqzCzlujkaa7bsLHZyi1cx60G270:UZO3sofX7CIjh0k8EaFLN104
TLSH
T1DA263382A6FEE62236A4230F84D5FD9619CC3F6CD65B22C6B7768CCE51E7D630503162
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/REVOSD_45000021449_20260921.exe

File Explorer

REVOSD_45000021449_20260921.rar.zip

.zip 4.6MB
REVOSD_45000021449_20260921.rar

.rar 4.6MB
REVOSD_45000021449_20260921.exe

.exe 7.0MB

REVOSD_45000021449_20260921.rar.zip

SHA256 d1799738e161b5f69dc60f3344d743f4ba530e67b48c79a16f7411770858446b
MD5 359c58d3c5d8333a7fec15bec3042230
SHA1 548446f85b7f14ce85b2bc17c12cf5adcecbddfd
SHA512 6fc077c699c6952ecb26d8f12527176ef4558e43dbb8a811d0ecab822569a033231e95524f8e0781a240ed686d48a23a6b1cb8c8bf6b31481ae3f6a3b5ba942d
SSDEEP 98304:UZO31StmfX7Ux34jOI0kqzCzlujkaa7bsLHZyi1cx60G270:UZO3sofX7CIjh0k8EaFLN104
TLSH
T1DA263382A6FEE62236A4230F84D5FD9619CC3F6CD65B22C6B7768CCE51E7D630503162
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

REVOSD_45000021449_20260921.exe

IMPHASH a46cc72b550adb245047c9a14f95beb2
SHA256 205486ad300765070545758b2ef8ca00acbf606baa4e5995354898c152348d3a
MD5 4e66f6b5b66363c4c867403e45edee55
SHA1 0ecbc23174d41dd33cb9686c6662301fbd13a86a
SHA512 af97299968f12af0bdebd8e67f218c55b749497f9abfabd1a9f707df1cd832b6d8cf471e7a11a8535e468f43d5caf97c35803b82cc8fc1bc4f020db2e275b779
SSDEEP 196608:Tzb3YCta7gQ1Oqk0AxVSN4zwl2IdlUNbR:DXfxVo4zg2IjyR
TLSH
T1DE76D03BD6AAC5EDC856D435A5A55B33A1703C0E85329177E7C21F242EB6328CEBD708
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

13024

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CloseHandle ContinueDebugEvent CreateEventW CreateFileMappingW CreateFileW DeleteCriticalSection DeleteProcThreadAttributeList DeviceIoControl EncodePointer EnterCriticalSection ExitProcess FindClose FindFirstFileExW FindNextFileW FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleCP GetConsoleMode GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDiskFreeSpaceExW GetEnvironmentStringsW GetFileType GetLastError GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GlobalMemoryStatusEx HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeProcThreadAttributeList InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage K32GetModuleInformation LCMapStringW LeaveCriticalSection LoadLibraryExW LocalAlloc LocalFree MapViewOfFile MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency RaiseException RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwindEx RtlVirtualUnwind SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter Sleep TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter UpdateProcThreadAttribute WaitForDebugEvent WaitForSingleObject WideCharToMultiByte WriteConsoleW WriteFile lstrcatW lstrcmpiW lstrcpyW

ole32

CoCreateInstance CoInitializeEx CoInitializeSecurity CoSetProxyBlanket CoUninitialize

oleaut32

SysAllocString SysFreeString VariantClear VariantInit

d3d11

D3D11CreateDevice

Sharing