Overview

overview

10

Static

static

4a08fa0e9d...93.exe

windows7-x64

10

4a08fa0e9d...93.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    4a08fa0e9d46964ee88efa05ac7aec0a2889b8b7094fbb3834102423b1915593
  • Size 410KB
  • Sample220719-3eysnahdc8
  • SHA256 4a08fa0e9d46964ee88efa05ac7aec0a2889b8b7094fbb3834102423b1915593
  • MD5 SHA1 SHA512
Score
10/10
revengerat@-novos hoteis-@stealertrojan

Malware Config

Extracted

Family

  • revengerat

Botnet

  • @-NOVOS HOTEIS-@

C2

  • cdtoriginal.ddns.net:1166

  • office365update.duckdns.org:1166

Mutex

  • SoftwareRemovalToolwINDOWS

Targets

    • Target
      4a08fa0e9d46964ee88efa05ac7aec0a2889b8b7094fbb3834102423b1915593
    • Size 410KB
    • SHA256 4a08fa0e9d46964ee88efa05ac7aec0a2889b8b7094fbb3834102423b1915593
    • MD5 SHA1 SHA512
    Score
    10/10
    revengerat@-novos hoteis-@stealertrojan

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • RevengeRat Executable

      stealer

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks