General
-
Target
c99d475a1d153a4e46829fa4c1cfebeb7ac73c3a5723d873fb5ff80ad32903b2
-
Size
17KB
-
Sample
220523-3qpzwshgg3
-
MD5
df66356151d4671e06f88a44b4c28dd3
-
SHA1
015f855ae32785eb9ea8ad1ecf252e3b6efaf88a
-
SHA256
c99d475a1d153a4e46829fa4c1cfebeb7ac73c3a5723d873fb5ff80ad32903b2
-
SHA512
bde5b8f19acca1dbec8516bfc9391173edad64315a8277c454e296807a2fae7cafdc644707e082c5f984e546893f6220651895665b4f0489aeb565457e0e4a83
Static task
static1
Behavioral task
behavioral1
Sample
c99d475a1d153a4e46829fa4c1cfebeb7ac73c3a5723d873fb5ff80ad32903b2.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
c99d475a1d153a4e46829fa4c1cfebeb7ac73c3a5723d873fb5ff80ad32903b2.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
revengerat
M939
landbo.ddns.net:2772
RV_MUTEX-JRMSltdcKeYu
Targets
-
-
Target
c99d475a1d153a4e46829fa4c1cfebeb7ac73c3a5723d873fb5ff80ad32903b2
-
Size
17KB
-
MD5
df66356151d4671e06f88a44b4c28dd3
-
SHA1
015f855ae32785eb9ea8ad1ecf252e3b6efaf88a
-
SHA256
c99d475a1d153a4e46829fa4c1cfebeb7ac73c3a5723d873fb5ff80ad32903b2
-
SHA512
bde5b8f19acca1dbec8516bfc9391173edad64315a8277c454e296807a2fae7cafdc644707e082c5f984e546893f6220651895665b4f0489aeb565457e0e4a83
Score10/10-
RevengeRat Executable
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-