Overview

overview

10

Static

static

91634dbbc3...16.exe

windows7_x64

10

91634dbbc3...16.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    91634dbbc3ac12dee468234cb1bab87e8875b940eae02c29e05611ec18e2cd16

  • Size

    99KB

  • Sample

    220307-m9rptsdfh8

  • MD5

    2a63d88b403e251d2587eb0fa5972356

  • SHA1

    d854b2e080cae641d50c09b5cc3e6bb2454c8ded

  • SHA256

    91634dbbc3ac12dee468234cb1bab87e8875b940eae02c29e05611ec18e2cd16

  • SHA512

    ffbcee55035f3c2c83e4d856c2a1badfc690e22cffdd14a4ead46990ee24baf96cda399ad6312e94d8ce0e05c00a91d2a25751370144f43743e6447fa54c21ce

Score
10/10
revengeratpersistencestealertrojan

Malware Config

Targets

    • Target

      91634dbbc3ac12dee468234cb1bab87e8875b940eae02c29e05611ec18e2cd16

    • Size

      99KB

    • MD5

      2a63d88b403e251d2587eb0fa5972356

    • SHA1

      d854b2e080cae641d50c09b5cc3e6bb2454c8ded

    • SHA256

      91634dbbc3ac12dee468234cb1bab87e8875b940eae02c29e05611ec18e2cd16

    • SHA512

      ffbcee55035f3c2c83e4d856c2a1badfc690e22cffdd14a4ead46990ee24baf96cda399ad6312e94d8ce0e05c00a91d2a25751370144f43743e6447fa54c21ce

    Score
    10/10
    revengeratstealertrojanpersistence

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • RevengeRat Executable

      stealer

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks