revengerat | 17a97f5698f2f19b4b43dc985193f734f8146c83d73daf853df9506f58b696b3 | Triage

Sharing

General

Target

17a97f5698f2f19b4b43dc985193f734f8146c83d73daf853df9506f58b696b3
Size

15KB
Sample

220219-k2p5xsbbgq
MD5

ec2df96be392543fa974d090962640e6
SHA1

b11ebd1f1b9423dfcdf81bf7c3fe1275b1d2aed1
SHA256

17a97f5698f2f19b4b43dc985193f734f8146c83d73daf853df9506f58b696b3
SHA512

bc8ddc1a7d7c4d07532a54dd486a07b4238256452d666849c7c266c83a877367f36a2ba6ce51db6a936acb4747c92d7bc52aee8d8aed7c3de02ad814f98e6a5a

Score

10^/10

revengerat client trojan

Malware Config

Extracted

Family

revengerat

Botnet

Client

C2

kimjoy.ddns.net:6699

Mutex

S1NTYL5X286LOEH

Targets

- Target
  
  17a97f5698f2f19b4b43dc985193f734f8146c83d73daf853df9506f58b696b3
- Size
  
  15KB
- MD5
  
  ec2df96be392543fa974d090962640e6
- SHA1
  
  b11ebd1f1b9423dfcdf81bf7c3fe1275b1d2aed1
- SHA256
  
  17a97f5698f2f19b4b43dc985193f734f8146c83d73daf853df9506f58b696b3
- SHA512
  
  bc8ddc1a7d7c4d07532a54dd486a07b4238256452d666849c7c266c83a877367f36a2ba6ce51db6a936acb4747c92d7bc52aee8d8aed7c3de02ad814f98e6a5a
Score

10^/10

revengerat client trojan
- RevengeRAT
  Remote-access trojan with a wide range of capabilities.
  trojan revengerat
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

clientrevengerat

behavioral1

revengeratclienttrojan

behavioral2

revengeratclienttrojan