General
- Target CDRevive-Launcher.exe
- Size 8.8MB
- Sample261030-te14caew3j
- SHA256 e33e9b0ff18058ae970ba78045032d77f65c321a0cdfc41c5795a371b35abc42
- MD5 8797fd191b3bd47fc7a2d0e1c82b9f78
- SHA1 6f923c87160b79d9096aefdb9040147f7cce19a4
- SHA512 1065d5f39fa2b0e079934713af807d87e8406a0e957ce04a685d15325af794d3589d5fbc96ecc186b0f1d84f0ae4365ead2aa91fc343b7267b663edbcf7b9e2b
- SSDEEP 196608:2nIXokmfOB05qnMWW3DYxjGob6Mw6xWApRQgsUGkmN2qdR50yqN/ZJdNxPflgZfh:mIdd0O2ZON3mRS4HYeg4UMMmn
- TLSH T115968C09D702E1B2E06741B09ACBE7F7953873358069CCFBF68D9E14B872AD1165A327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CDRevive-Launcher.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
CDRevive-Launcher.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target CDRevive-Launcher.exe
- Size 8.8MB
- SHA256 e33e9b0ff18058ae970ba78045032d77f65c321a0cdfc41c5795a371b35abc42
- MD5 8797fd191b3bd47fc7a2d0e1c82b9f78
- SHA1 6f923c87160b79d9096aefdb9040147f7cce19a4
- SHA512 1065d5f39fa2b0e079934713af807d87e8406a0e957ce04a685d15325af794d3589d5fbc96ecc186b0f1d84f0ae4365ead2aa91fc343b7267b663edbcf7b9e2b
- SSDEEP 196608:2nIXokmfOB05qnMWW3DYxjGob6Mw6xWApRQgsUGkmN2qdR50yqN/ZJdNxPflgZfh:mIdd0O2ZON3mRS4HYeg4UMMmn
- TLSH T115968C09D702E1B2E06741B09ACBE7F7953873358069CCFBF68D9E14B872AD1165A327
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.