Overview

overview

10

Static

static

10

file.exe

windows7_x64

10

file.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file

  • Size

    17KB

  • Sample

    201109-b732x2lx9e

  • MD5

    bd86b3d43f45a0dc0ff6f9557a2fa13f

  • SHA1

    1ab9d082c409e6b5e956973e540cdc5cbe5e4160

  • SHA256

    291bf31470c9bcacec467c980adb7a3d111ebb6b72cf07147884a7eae5cabde9

  • SHA512

    058c70d976a8c6fdb363d2b3990f68acb35eb928cbfc5742ade6f5334e26039acbb171de4ec5250375012983c2659133a053a2b63fdc63a749356c016cd84dde

Score
10/10
revengeratgueststealertrojan

Malware Config

Extracted

Family

revengerat

Botnet

Guest

C2

192.168.234.157:4444

Mutex

RV_MUTEX

Targets

    • Target

      file

    • Size

      17KB

    • MD5

      bd86b3d43f45a0dc0ff6f9557a2fa13f

    • SHA1

      1ab9d082c409e6b5e956973e540cdc5cbe5e4160

    • SHA256

      291bf31470c9bcacec467c980adb7a3d111ebb6b72cf07147884a7eae5cabde9

    • SHA512

      058c70d976a8c6fdb363d2b3990f68acb35eb928cbfc5742ade6f5334e26039acbb171de4ec5250375012983c2659133a053a2b63fdc63a749356c016cd84dde

    Score
    10/10
    revengeratgueststealertrojan

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • RevengeRat Executable

      stealer

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks