Overview

overview

10

Static

static

Swift MT10...df.exe

windows7_x64

10

Swift MT10...df.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Swift MT103 & Bank Details,pdf.exe
  • Size 783KB
  • Sample210607-l1m6bm93v2
  • SHA256 f24016eadd5ac1e6ce3822d0ffb92459e9455fcf15fa93703e5cddb34151ad98
  • MD5 SHA1 SHA512
Score
10/10
revengeratbilliontrojan

Malware Config

Extracted

Family

  • revengerat

Botnet

  • BILLION

C2

  • rej.rejgroups.com:4040

Mutex

  • RV_MUTEX-Y6F7MMH6M66HDLJMYP6B6P

Targets

    • Target
      Swift MT103 & Bank Details,pdf.exe
    • Size 783KB
    • SHA256 f24016eadd5ac1e6ce3822d0ffb92459e9455fcf15fa93703e5cddb34151ad98
    • MD5 SHA1 SHA512
    Score
    10/10
    revengeratbilliontrojan

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks