General

  • Target
    Inquiry for PR#420002721.exe
  • Size 1.5MB
  • Sample210607-98pvybcl3j
  • SHA256 ef7e26f9256f7c41a9c0834cce3ba599c4cbcc857ab87a7fcc4b50ccebe5b813
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • revengerat

Botnet
  • DEGRACE

C2
  • 77.247.110.178:5040

Mutex
  • RV_MUTEX-MB4S0YIGA6UFWH10GXQLHP

Targets

    • Target
      Inquiry for PR#420002721.exe
    • Size 1.5MB
    • SHA256 ef7e26f9256f7c41a9c0834cce3ba599c4cbcc857ab87a7fcc4b50ccebe5b813
    • MD5 SHA1 SHA512
    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks