General

  • Target

    2cecd9f3d4c63c43a84e42005456aef5e4734ad708a37d4e72b50150da51d8f2

  • Size

    156KB

  • Sample

    221122-jnvykshh2s

  • MD5

    d7e6965e2856ca7501600704a76fbc55

  • SHA1

    9f4b0b726503c7bf4bc4ed6c9d95c874443e2eee

  • SHA256

    2cecd9f3d4c63c43a84e42005456aef5e4734ad708a37d4e72b50150da51d8f2

  • SHA512

    af03e9308c285544ca14934790b7e8ed098a4dac3157c8dbadbaa7ec727b7e37504ca2dbb0b7acb91229233ffdcc33a6811f9d86d904276082b57cb1e994e322

  • SSDEEP

    3072:3PDQkYa0ZPjt/4+t4kPUf8QvPbdMaDhIeBu9lZbShDIA8AW:3PDQkYa0ZPjt/Tt4BfNhIiFIA8R

Malware Config

Extracted

Family

revengerat

Botnet

ESTOU DE VOLTA PAI

C2

accer.sytes.net:333

Mutex

RV_MUTEX-wHuiGGjjtnxDpnF

Targets

    • Target

      2cecd9f3d4c63c43a84e42005456aef5e4734ad708a37d4e72b50150da51d8f2

    • Size

      156KB

    • MD5

      d7e6965e2856ca7501600704a76fbc55

    • SHA1

      9f4b0b726503c7bf4bc4ed6c9d95c874443e2eee

    • SHA256

      2cecd9f3d4c63c43a84e42005456aef5e4734ad708a37d4e72b50150da51d8f2

    • SHA512

      af03e9308c285544ca14934790b7e8ed098a4dac3157c8dbadbaa7ec727b7e37504ca2dbb0b7acb91229233ffdcc33a6811f9d86d904276082b57cb1e994e322

    • SSDEEP

      3072:3PDQkYa0ZPjt/4+t4kPUf8QvPbdMaDhIeBu9lZbShDIA8AW:3PDQkYa0ZPjt/Tt4BfNhIiFIA8R

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • RevengeRat Executable

    • Drops startup file

MITRE ATT&CK Matrix

Tasks