Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
08-05-2023 14:30
General
-
Target
Client.exe
-
Size
101KB
-
MD5
090f262b8a9b0787153b25d5f56b7ad2
-
SHA1
fde298860db49eb41a08434243a8259a01ca1043
-
SHA256
1d98a73f2a9fd2de42950b4b1c7f9de1cf7ec6d56523565675b51410274b9ab8
-
SHA512
ee2d19d95d92b0269f493a0666bd73b1e0ef6224f9773f41bde46515865c8e060bf6ce262c253ed64564bcc0137efebab2ee43e67700ba43a22002c07ad85572
-
SSDEEP
1536:uu+z/aQkPlpqNZoMoj58oZJbZseudD/FB3BINVRX3FjBqatD3tSYl9h:EMlpqNZoMS58oZJ9shx3BINZjH9SYl
Score
10/10
Malware Config
Extracted
Family
revengerat
Botnet
Guest
C2
127.0.0.1:333
Mutex
RV_MUTEX
Signatures
-
RevengeRAT
Remote-access trojan with a wide range of capabilities.
-
RevengeRat Executable 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Client.exe"C:\Users\Admin\AppData\Local\Temp\Client.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
120KB
-
Filesize
4.8MB
-
Filesize
64KB
-
Filesize
664KB
-
Filesize
392KB
-
Filesize
64KB