Overview

overview

10

Static

static

10

7bab0dd60f...91.exe

windows7_x64

10

7bab0dd60f...91.exe

windows10-2004_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7bab0dd60f96b57515e08c420630c68ed6134054339c3ba4b6938c8140d1df91

  • Size

    143KB

  • Sample

    220201-f8mk6ahddr

  • MD5

    e11341da351a34900b5e31a9023db646

  • SHA1

    59468512e473a9680e765565c617b4bf09fe8ef4

  • SHA256

    7bab0dd60f96b57515e08c420630c68ed6134054339c3ba4b6938c8140d1df91

  • SHA512

    125fb6075910e31d7d3bedf53e8bde882290c4ece9e040aa151fe39072e0558af4f51ec4fc69ff9141440bd21fdb12e5196ce3d83a6959e25e21498feaad7d76

Score
10/10
revengeratpersistencestealertrojan

Malware Config

Targets

    • Target

      7bab0dd60f96b57515e08c420630c68ed6134054339c3ba4b6938c8140d1df91

    • Size

      143KB

    • MD5

      e11341da351a34900b5e31a9023db646

    • SHA1

      59468512e473a9680e765565c617b4bf09fe8ef4

    • SHA256

      7bab0dd60f96b57515e08c420630c68ed6134054339c3ba4b6938c8140d1df91

    • SHA512

      125fb6075910e31d7d3bedf53e8bde882290c4ece9e040aa151fe39072e0558af4f51ec4fc69ff9141440bd21fdb12e5196ce3d83a6959e25e21498feaad7d76

    Score
    10/10
    revengeratstealertrojanpersistence

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • RevengeRat Executable

      stealer

    • Executes dropped EXE

    • Sets service image path in registry

      persistence

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks