Overview

overview

10

Static

static

385B9916D2...23.exe

windows7_x64

10

385B9916D2...23.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    385B9916D255F7B6E411E39F6CAB3623.exe
  • Size 410KB
  • Sample210620-lfzgvxq2l2
  • SHA256 5f5dd9783ee79a7097f47c023015c07c76d5b9e5562362fa54cc28b2f7d1744a
  • MD5 SHA1 SHA512
Score
10/10
revengeratpersistencestealertrojan

Malware Config

Targets

    • Target
      385B9916D255F7B6E411E39F6CAB3623.exe
    • Size 410KB
    • SHA256 5f5dd9783ee79a7097f47c023015c07c76d5b9e5562362fa54cc28b2f7d1744a
    • MD5 SHA1 SHA512
    Score
    10/10
    revengeratpersistencestealertrojan

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • RevengeRat Executable

      stealer

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks