revengerat | b1606f9dc2798f3bcb1db5bd72eeb4720ada1ba13e9d769d223f5f7df8be9a8f | Triage

Analysis

max time kernel
4294209s
max time network
123s
platform
windows7_x64
resource
win7-20220223-en
submitted
25-02-2022 19:37

Sharing

Report Analysis Logs

General

Target

b1606f9dc2798f3bcb1db5bd72eeb4720ada1ba13e9d769d223f5f7df8be9a8f.exe
Size

15KB
MD5

ec0a27d254b040881c5957015c2eac73
SHA1

ae8c7d3822615f95dc0f14b8aa4b38723af042ce
SHA256

b1606f9dc2798f3bcb1db5bd72eeb4720ada1ba13e9d769d223f5f7df8be9a8f
SHA512

5484aeab229a235e0544ae86cc7c09a7bd575c4f0b222ce0fef7bd61ee831ce91b07085cb63233bd5c6df0f3d51b4529c73a3c87075735f57cdbe2f661a5d6e5

Score

10^/10

revengerat client trojan

Malware Config

Extracted

Family

revengerat

Botnet

Client

C2

kimjoy.ddns.net:2021

Mutex

RXQLV8XYTDNHNSA

Signatures

RevengeRAT
Remote-access trojan with a wide range of capabilities.
trojan revengerat

C:\Users\Admin\AppData\Local\Temp\b1606f9dc2798f3bcb1db5bd72eeb4720ada1ba13e9d769d223f5f7df8be9a8f.exe
"C:\Users\Admin\AppData\Local\Temp\b1606f9dc2798f3bcb1db5bd72eeb4720ada1ba13e9d769d223f5f7df8be9a8f.exe"
1⤵
PID:1144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1144-54-0x0000000000E90000-0x0000000000E9A000-memory.dmp

Filesize
40KB

Download
memory/1144-55-0x000007FEF5023000-0x000007FEF5024000-memory.dmp

Filesize
4KB

Download
memory/1144-56-0x000000001AE00000-0x000000001AE02000-memory.dmp

Filesize
8KB

Download