Overview

overview

10

Static

static

10

d6e2d8bdf8...3e.exe

windows7_x64

10

d6e2d8bdf8...3e.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d6e2d8bdf8569095507bd659188149580bf33e44693edd308905f68ddba3253e

  • Size

    138KB

  • Sample

    201111-sxw5ax72p2

  • MD5

    d3edab665c966aefa822e49154387b54

  • SHA1

    cd05ec3580df1480bc4ae28a3f1dc6027a123950

  • SHA256

    d6e2d8bdf8569095507bd659188149580bf33e44693edd308905f68ddba3253e

  • SHA512

    ffa0a25b8654f22dfccc3742c35535aea0eabf9464849f520738a6eca3d1a94276da4145e3629ef617c2c6b753ebe2d1df81a744ca32875365def01d7c6f620e

Score
10/10
revengeratstealertrojan

Malware Config

Targets

    • Target

      d6e2d8bdf8569095507bd659188149580bf33e44693edd308905f68ddba3253e

    • Size

      138KB

    • MD5

      d3edab665c966aefa822e49154387b54

    • SHA1

      cd05ec3580df1480bc4ae28a3f1dc6027a123950

    • SHA256

      d6e2d8bdf8569095507bd659188149580bf33e44693edd308905f68ddba3253e

    • SHA512

      ffa0a25b8654f22dfccc3742c35535aea0eabf9464849f520738a6eca3d1a94276da4145e3629ef617c2c6b753ebe2d1df81a744ca32875365def01d7c6f620e

    Score
    10/10
    revengeratstealertrojan

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • RevengeRat Executable

      stealer

    • Drops startup file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks