Overview

overview

10

Static

static

10

3MFnsubA.exe

windows7_x64

10

3MFnsubA.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    3MFnsubA.exe
  • Size 17KB
  • Sample200912-ss9eaytthx
  • SHA256 ca8792b14536fd50ff51c39aa1f3dd751be0d6201e7766823848b34cb9d84f92
  • MD5 SHA1 SHA512
Score
10/10
revengeratguesttrojan

Malware Config

Extracted

Family

  • revengerat

Botnet

  • Guest

C2

  • systemmicrosoft.linkpc.net:5005

Mutex

  • RV_MUTEX

Targets

    • Target
      3MFnsubA.exe
    • Size 17KB
    • SHA256 ca8792b14536fd50ff51c39aa1f3dd751be0d6201e7766823848b34cb9d84f92
    • MD5 SHA1 SHA512
    Score
    10/10
    trojanrevengerat

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • Executes dropped EXE

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks