General

  • Target

    56cd5749a3f4a237918a7a61488027f32daa321ff5bf4b7505cef0e4fa91a5b2

  • Size

    23KB

  • Sample

    220516-pdj18adecq

  • MD5

    9f5f2fc905270a6f6c952c52f9b438b9

  • SHA1

    66386b1e39842a9f843183829e8546fc82a61b16

  • SHA256

    56cd5749a3f4a237918a7a61488027f32daa321ff5bf4b7505cef0e4fa91a5b2

  • SHA512

    ea8d3d1937cfdd010b1ac6831eb7c77f32db2cf30eeb25919f7de1124f44eb7e07ef7a662ca33af63628b6405b1497dbc067673e6602793971a79adb85d231a6

Malware Config

Extracted

Family

revengerat

Mutex

Targets

    • Target

      56cd5749a3f4a237918a7a61488027f32daa321ff5bf4b7505cef0e4fa91a5b2

    • Size

      23KB

    • MD5

      9f5f2fc905270a6f6c952c52f9b438b9

    • SHA1

      66386b1e39842a9f843183829e8546fc82a61b16

    • SHA256

      56cd5749a3f4a237918a7a61488027f32daa321ff5bf4b7505cef0e4fa91a5b2

    • SHA512

      ea8d3d1937cfdd010b1ac6831eb7c77f32db2cf30eeb25919f7de1124f44eb7e07ef7a662ca33af63628b6405b1497dbc067673e6602793971a79adb85d231a6

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • RevengeRat Executable

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Matrix ATT&CK v6

Command and Control

Web Service

1
T1102

Tasks