revengerat | 0264d5c4baf30f82224d79687c4b01716d53af303dd5f86e74df1828a60ae43e | Triage

Analysis

max time kernel
149s
max time network
47s
platform
windows7_x64
resource
win7-20220414-en
submitted
25-05-2022 00:13

Sharing

Report Analysis Logs

General

Target

0264d5c4baf30f82224d79687c4b01716d53af303dd5f86e74df1828a60ae43e.exe
Size

34KB
MD5

2eec3fa581d99505ebc1e21a31879fac
SHA1

9c34cf1776ebcf5611501ed767241c8049f51aeb
SHA256

0264d5c4baf30f82224d79687c4b01716d53af303dd5f86e74df1828a60ae43e
SHA512

8a4e04da014e42987e138544633d7e21b06b11b523d029473180f5b798019ca3e6f21924d72653fcde81ca987bcc306700f7677994bb0f81c42f536dff72bf93

Score

10^/10

revengerat nyancatrevenge trojan

Malware Config

Extracted

Family

revengerat

Botnet

NyanCatRevenge

C2

tresor2020.ddns.net:1604

Mutex

b5337f6003ae455

Signatures

RevengeRAT
Remote-access trojan with a wide range of capabilities.
trojan revengerat

C:\Users\Admin\AppData\Local\Temp\0264d5c4baf30f82224d79687c4b01716d53af303dd5f86e74df1828a60ae43e.exe
"C:\Users\Admin\AppData\Local\Temp\0264d5c4baf30f82224d79687c4b01716d53af303dd5f86e74df1828a60ae43e.exe"
1⤵
PID:388

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/388-54-0x0000000000F00000-0x0000000000F0E000-memory.dmp

Filesize
56KB

Download
memory/388-55-0x0000000000140000-0x0000000000148000-memory.dmp

Filesize
32KB

Download
memory/388-56-0x0000000000150000-0x000000000015A000-memory.dmp

Filesize
40KB

Download