Overview

overview

10

Static

static

10

b1606f9dc2...8f.exe

windows7_x64

10

b1606f9dc2...8f.exe

windows10-2004_x64

10

Analysis

  • max time kernel
    149s
  • max time network
    138s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-en-20220112
  • submitted
    25-02-2022 19:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b1606f9dc2798f3bcb1db5bd72eeb4720ada1ba13e9d769d223f5f7df8be9a8f.exe

  • Size

    15KB

  • MD5

    ec0a27d254b040881c5957015c2eac73

  • SHA1

    ae8c7d3822615f95dc0f14b8aa4b38723af042ce

  • SHA256

    b1606f9dc2798f3bcb1db5bd72eeb4720ada1ba13e9d769d223f5f7df8be9a8f

  • SHA512

    5484aeab229a235e0544ae86cc7c09a7bd575c4f0b222ce0fef7bd61ee831ce91b07085cb63233bd5c6df0f3d51b4529c73a3c87075735f57cdbe2f661a5d6e5

Score
10/10
revengeratclienttrojan

Malware Config

Extracted

Family

revengerat

Botnet

Client

C2

kimjoy.ddns.net:2021

Mutex

RXQLV8XYTDNHNSA

Signatures

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

Processes

  • C:\Users\Admin\AppData\Local\Temp\b1606f9dc2798f3bcb1db5bd72eeb4720ada1ba13e9d769d223f5f7df8be9a8f.exe
    "C:\Users\Admin\AppData\Local\Temp\b1606f9dc2798f3bcb1db5bd72eeb4720ada1ba13e9d769d223f5f7df8be9a8f.exe"
    1⤵
      PID:3944

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3944-130-0x0000000000330000-0x000000000033A000-memory.dmp
      Filesize

      40KB

      Download
    • memory/3944-131-0x00007FFE40E23000-0x00007FFE40E25000-memory.dmp
      Filesize

      8KB

      Download
    • memory/3944-132-0x000000001C460000-0x000000001C462000-memory.dmp
      Filesize

      8KB

      Download