General

  • Target
    Inquiry for PR#4200027219 2.exe
  • Size 999KB
  • Sample210607-dtg136l3be
  • SHA256 86ff5481ed934d43bc54c3a0d9989958c0de24aec0fb74404dac36a594193ed2
  • MD5 SHA1 SHA512

Malware Config

Extracted

Family
  • revengerat

Botnet
  • DEGRACE

C2
  • 77.247.110.178:5040

Mutex
  • RV_MUTEX-MB4S0YIGA6UFWH10GXQLHP

Targets

    • Target
      Inquiry for PR#4200027219 2.exe
    • Size 999KB
    • SHA256 86ff5481ed934d43bc54c3a0d9989958c0de24aec0fb74404dac36a594193ed2
    • MD5 SHA1 SHA512
    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks