General
- Target RevolutionMacro (1).exe
- Size 80.7MB
- Sample261107-w9c14set4s
- SHA256 f1265f44fde306800bc82414f71d636400e24c63edd5c00c564e375951c6bb59
- MD5 2599d3375b1836e947c28207dc294d01
- SHA1 0b8b33afcc9c2f29cf217a28311c403f1b46145b
- SHA512 38bb245e936ba79bf2e70c7c3e374ec2661dfe4d9a598e2393c2ed72c98b4c58b0f5c1377ff8e19b4e93dfa6bd0707085e1f2cc1f3d1eef1f074be219856c04a
- SSDEEP 786432:KKNda1oMJEw0R8H/isdNaG8vyy2o56xro86VM2oBIzGSHNQ7:zNdEr5n8vyypxRoBI3H+7
- TLSH T1B6085B93E59A60E9C4AFD6358672A563BE223C4D472023E76F90F7202F76BD065BD700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RevolutionMacro (1).exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
RevolutionMacro (1).exe
Resource
win11ltsc2024-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target RevolutionMacro (1).exe
- Size 80.7MB
- SHA256 f1265f44fde306800bc82414f71d636400e24c63edd5c00c564e375951c6bb59
- MD5 2599d3375b1836e947c28207dc294d01
- SHA1 0b8b33afcc9c2f29cf217a28311c403f1b46145b
- SHA512 38bb245e936ba79bf2e70c7c3e374ec2661dfe4d9a598e2393c2ed72c98b4c58b0f5c1377ff8e19b4e93dfa6bd0707085e1f2cc1f3d1eef1f074be219856c04a
- SSDEEP 786432:KKNda1oMJEw0R8H/isdNaG8vyy2o56xro86VM2oBIzGSHNQ7:zNdEr5n8vyypxRoBI3H+7
- TLSH T1B6085B93E59A60E9C4AFD6358672A563BE223C4D472023E76F90F7202F76BD065BD700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Loads dropped DLL
Checks whether UAC is enabled
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.