Overview

overview

10

Static

static

10

b1606f9dc2...8f.exe

windows7_x64

10

b1606f9dc2...8f.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b1606f9dc2798f3bcb1db5bd72eeb4720ada1ba13e9d769d223f5f7df8be9a8f

  • Size

    15KB

  • Sample

    220225-ybyk9sadfl

  • MD5

    ec0a27d254b040881c5957015c2eac73

  • SHA1

    ae8c7d3822615f95dc0f14b8aa4b38723af042ce

  • SHA256

    b1606f9dc2798f3bcb1db5bd72eeb4720ada1ba13e9d769d223f5f7df8be9a8f

  • SHA512

    5484aeab229a235e0544ae86cc7c09a7bd575c4f0b222ce0fef7bd61ee831ce91b07085cb63233bd5c6df0f3d51b4529c73a3c87075735f57cdbe2f661a5d6e5

Score
10/10
revengeratclienttrojan

Malware Config

Extracted

Family

revengerat

Botnet

Client

C2

kimjoy.ddns.net:2021

Mutex

RXQLV8XYTDNHNSA

Targets

    • Target

      b1606f9dc2798f3bcb1db5bd72eeb4720ada1ba13e9d769d223f5f7df8be9a8f

    • Size

      15KB

    • MD5

      ec0a27d254b040881c5957015c2eac73

    • SHA1

      ae8c7d3822615f95dc0f14b8aa4b38723af042ce

    • SHA256

      b1606f9dc2798f3bcb1db5bd72eeb4720ada1ba13e9d769d223f5f7df8be9a8f

    • SHA512

      5484aeab229a235e0544ae86cc7c09a7bd575c4f0b222ce0fef7bd61ee831ce91b07085cb63233bd5c6df0f3d51b4529c73a3c87075735f57cdbe2f661a5d6e5

    Score
    10/10
    revengeratclienttrojan

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks