Overview

overview

10

Static

static

10

91KeVjpU.exe

windows7_x64

10

91KeVjpU.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    91KeVjpU.exe
  • Size 179KB
  • Sample200916-see7nb136x
  • SHA256 bd1b202a5eed029524ad2a9947c6bf796352d4da36b43bf738ab833df3ecdaea
  • MD5 SHA1 SHA512
Score
10/10
revengeratguestpersistencetrojan

Malware Config

Extracted

Family

  • revengerat

Botnet

  • Guest

C2

  • dk0004-60011.portmap.io:60011

Mutex

  • RV_MUTEX

Targets

    • Target
      91KeVjpU.exe
    • Size 179KB
    • SHA256 bd1b202a5eed029524ad2a9947c6bf796352d4da36b43bf738ab833df3ecdaea
    • MD5 SHA1 SHA512
    Score
    10/10
    trojanrevengeratpersistence

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • Executes dropped EXE

    • Drops startup file

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks