Analysis
-
max time kernel
151s -
max time network
45s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
31-05-2022 01:38
General
-
Target
078419941922c5eebd315c0d07c8bf6cec629a021d4a01819013b7f996dc10f7.exe
-
Size
97KB
-
MD5
097799c75bbcdbe2cfd3bfdb88ec08f8
-
SHA1
a18e324f0699d80abd23534613287e6d307c829d
-
SHA256
078419941922c5eebd315c0d07c8bf6cec629a021d4a01819013b7f996dc10f7
-
SHA512
d082373fe9670c2cea543cf28e618ce15a569055fa057ee9a02ef0fb701677700511b3cd6b4b913b0f1c3a6998732c0d9909b2ad536933519e5c9fec31ac80b9
Score
10/10
Malware Config
Extracted
Family
revengerat
Mutex
Signatures
-
RevengeRAT
Remote-access trojan with a wide range of capabilities.
-
RevengeRat Executable 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\078419941922c5eebd315c0d07c8bf6cec629a021d4a01819013b7f996dc10f7.exe"C:\Users\Admin\AppData\Local\Temp\078419941922c5eebd315c0d07c8bf6cec629a021d4a01819013b7f996dc10f7.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
120KB
-
Filesize
744KB
-
Filesize
21.5MB
-
Filesize
12.2MB
-
Filesize
32KB
-
Filesize
1.9MB
-
Filesize
15.3MB
-
Filesize
10.3MB
-
Filesize
2.1MB
-
Filesize
1.2MB
-
Filesize
8.5MB
-
Filesize
21.5MB
-
Filesize
12.2MB
-
Filesize
2.1MB