Overview

overview

6

Static

static

10

7d8f8ec2d3...c7.exe

windows7_x64

6

7d8f8ec2d3...c7.exe

windows10_x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7d8f8ec2d39a504791f4f8cdf32b37c7.exe

  • Size

    24KB

  • Sample

    210531-tpzq1bg2js

  • MD5

    7d8f8ec2d39a504791f4f8cdf32b37c7

  • SHA1

    224139cabf4b80fbca676fd4f85db24fb31d1ca6

  • SHA256

    1a433fa314830fd8efc752e98db2f4ce58403960eb5570ce7d43ca264d86b596

  • SHA512

    57d9e0b4910d7dc23520114effdef1b4dc9c99b3584c5dbada9505d744fefe95c6c39bd289075bba339568f3872344bf72ff0a558d7c1d78e15ab1061a0df7a1

Score
10/10
revengeratlimerevenge

Malware Config

Extracted

Family

revengerat

Botnet

LimeRevenge

Mutex

1fe-95ff-d7128a63549a

Targets

    • Target

      7d8f8ec2d39a504791f4f8cdf32b37c7.exe

    • Size

      24KB

    • MD5

      7d8f8ec2d39a504791f4f8cdf32b37c7

    • SHA1

      224139cabf4b80fbca676fd4f85db24fb31d1ca6

    • SHA256

      1a433fa314830fd8efc752e98db2f4ce58403960eb5570ce7d43ca264d86b596

    • SHA512

      57d9e0b4910d7dc23520114effdef1b4dc9c99b3584c5dbada9505d744fefe95c6c39bd289075bba339568f3872344bf72ff0a558d7c1d78e15ab1061a0df7a1

    Score
    6/10

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Web Service

1
T1102

Impact

Tasks