revengerat | d85497f61b07d8f8cc30c3c66ab21883a0274c7a3e7bc982a3a622ca2eed39a4 | Triage

Sharing

General

Target

d85497f61b07d8f8cc30c3c66ab21883a0274c7a3e7bc982a3a622ca2eed39a4
Size

50KB
Sample

220201-d7neysgban
MD5

c5a86a4a3099d907967d739d5d6f5436
SHA1

45bdcdedb99ce9e62b7d0efc44eaa99a72ad12ce
SHA256

d85497f61b07d8f8cc30c3c66ab21883a0274c7a3e7bc982a3a622ca2eed39a4
SHA512

5e912ac74c125a4bb861d0136046c2affc3839d9faf13a07be59f3e076fb3b5d964019ff3056d11d5382fc995b5cf880b983569166c43982211d3f0c4ac51fa5

Score

10^/10

revengerat persistence stealer

Malware Config

Targets

- Target
  
  d85497f61b07d8f8cc30c3c66ab21883a0274c7a3e7bc982a3a622ca2eed39a4
- Size
  
  50KB
- MD5
  
  c5a86a4a3099d907967d739d5d6f5436
- SHA1
  
  45bdcdedb99ce9e62b7d0efc44eaa99a72ad12ce
- SHA256
  
  d85497f61b07d8f8cc30c3c66ab21883a0274c7a3e7bc982a3a622ca2eed39a4
- SHA512
  
  5e912ac74c125a4bb861d0136046c2affc3839d9faf13a07be59f3e076fb3b5d964019ff3056d11d5382fc995b5cf880b983569166c43982211d3f0c4ac51fa5
Score

8^/10

persistence
- Sets service image path in registry
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

stealerrevengerat

behavioral1

behavioral2