Overview

overview

10

Static

static

5

9698e8777e...9f.exe

windows7_x64

10

9698e8777e...9f.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9698e8777eb27b6304c236f03237e354dafb9bcc5e68559bafe051d58634e69f

  • Size

    972KB

  • Sample

    220525-ah52xsgeeq

  • MD5

    bace24eadab2c4f223dc58709049b633

  • SHA1

    6cf43ccca649bd07f05f118191b3b423e67dc86c

  • SHA256

    9698e8777eb27b6304c236f03237e354dafb9bcc5e68559bafe051d58634e69f

  • SHA512

    79cfaff3ed06701b579c2cd5fdcab633208d490fc0a1d8f1ca456cf8b421aaac47fed18c656a7ebda1c53519098a999beb72f7d2f826ba25c0b6fc639e32f83e

Score
10/10
revengeratcuidadonoipstealertrojan

Malware Config

Extracted

Family

revengerat

Botnet

cuidadonoip

C2

redlan1.hopto.org:3344

Mutex

RV_MUTEX-wawrHJfWfhaR

Targets

    • Target

      9698e8777eb27b6304c236f03237e354dafb9bcc5e68559bafe051d58634e69f

    • Size

      972KB

    • MD5

      bace24eadab2c4f223dc58709049b633

    • SHA1

      6cf43ccca649bd07f05f118191b3b423e67dc86c

    • SHA256

      9698e8777eb27b6304c236f03237e354dafb9bcc5e68559bafe051d58634e69f

    • SHA512

      79cfaff3ed06701b579c2cd5fdcab633208d490fc0a1d8f1ca456cf8b421aaac47fed18c656a7ebda1c53519098a999beb72f7d2f826ba25c0b6fc639e32f83e

    Score
    10/10
    revengeratcuidadonoipstealertrojan

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • RevengeRat Executable

      stealer

    • Drops startup file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks