General

  • Target

    05ab6096bdf888ccffb02027a78de35c26618416b23d2b1a37a9b03ffe63b8e4

  • Size

    89KB

  • Sample

    230129-z96vzaeg81

  • MD5

    6a54d673db8827d2f38a84bf1a7f7cc4

  • SHA1

    3b5c381a6ef6da19ac68de6affc13bc23699bdb8

  • SHA256

    05ab6096bdf888ccffb02027a78de35c26618416b23d2b1a37a9b03ffe63b8e4

  • SHA512

    bab581a5edcd16d5f68433fd301ea6ef49cc4c1caa84db53407b9c7dee03de81142c0be2806ce91c5f315bf71e08389197a79acaefae9de446ef5df5851281c6

  • SSDEEP

    1536:zuH+Zdf7VQJDIg8LdLTlckWvSU6lYNG6avMk8A/oRc28r/SH4AtKVrOQu15tNVpu:z4+Xf7VQCg0dLTbPSNGNvtz/H/1OTpqL

Malware Config

Extracted

Family

revengerat

Botnet

NyanCatRevenge

C2

mr7bashbab.ddns.net:59588

Mutex

1947dc3fb2

Targets

    • Target

      05ab6096bdf888ccffb02027a78de35c26618416b23d2b1a37a9b03ffe63b8e4

    • Size

      89KB

    • MD5

      6a54d673db8827d2f38a84bf1a7f7cc4

    • SHA1

      3b5c381a6ef6da19ac68de6affc13bc23699bdb8

    • SHA256

      05ab6096bdf888ccffb02027a78de35c26618416b23d2b1a37a9b03ffe63b8e4

    • SHA512

      bab581a5edcd16d5f68433fd301ea6ef49cc4c1caa84db53407b9c7dee03de81142c0be2806ce91c5f315bf71e08389197a79acaefae9de446ef5df5851281c6

    • SSDEEP

      1536:zuH+Zdf7VQJDIg8LdLTlckWvSU6lYNG6avMk8A/oRc28r/SH4AtKVrOQu15tNVpu:z4+Xf7VQCg0dLTbPSNGNvtz/H/1OTpqL

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

MITRE ATT&CK Matrix

Tasks