Overview

overview

10

Static

static

10

Revenge-RA...nt.exe

windows10-2004-x64

10

Revenge-RA...xe.exe

windows10-2004-x64

1

Revenge-RA...SC.exe

windows10-2004-x64

1

Revenge-RA...it.exe

windows10-2004-x64

1

Revenge-RA...xe.exe

windows10-2004-x64

1

Revenge-RA...64.exe

windows10-2004-x64

1

Revenge-RA...px.exe

windows10-2004-x64

7

Revenge-RA...RC.exe

windows10-2004-x64

1

Revenge-RA...er.exe

windows10-2004-x64

1

Revenge-RA...or.exe

windows10-2004-x64

7

Revenge-RA...ss.exe

windows10-2004-x64

1

Revenge-RA...er.exe

windows10-2004-x64

1

Revenge-RA....3.exe

windows10-2004-x64

1

Revenge-RA...er.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    230s
  • max time network
    235s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230621-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-06-2023 05:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Revenge-RAT v0.3/Revenge-RAT v0.3/Extensions/Aut2Exe/upx.exe

  • Size

    298KB

  • MD5

    e9eacbb7ab4b3f66019e0a2f13a1dba9

  • SHA1

    ae30894b29e52bf04afc4a54795d438fb910acff

  • SHA256

    0c3dc789d0a46493bd097526b920d913d930d96b1052cb331eec3ac560c89996

  • SHA512

    925445d20c93c65a282fc59f773551d824bff1f8e2623fd8ea0c587831a9550c400f121defb3d82c8f0401903fa69e3154dc98e29688d02af1d5d01247914a06

  • SSDEEP

    6144:vZCWmlys014OqpXDXz7yIrozs0WuNd3ojusBdgnNW6r4F53ttuGENGFdVCLEYnPQ:hCWV7q9zGImAjJdcH4j3ttzFdVCLNSf5

Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 2 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Processes

  • C:\Users\Admin\AppData\Local\Temp\Revenge-RAT v0.3\Revenge-RAT v0.3\Extensions\Aut2Exe\upx.exe
    "C:\Users\Admin\AppData\Local\Temp\Revenge-RAT v0.3\Revenge-RAT v0.3\Extensions\Aut2Exe\upx.exe"
    1⤵
      PID:652

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/652-133-0x0000000000400000-0x000000000059C000-memory.dmp
      Filesize

      1.6MB

      Download
    • memory/652-134-0x0000000000400000-0x000000000059C000-memory.dmp
      Filesize

      1.6MB

      Download