Overview

overview

10

Static

static

10

5A3FE2B161...6B.exe

windows7-x64

10

5A3FE2B161...6B.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5A3FE2B16102676E5D544D2887996B6B.exe

  • Size

    20KB

  • Sample

    231008-scmbqsff55

  • MD5

    5a3fe2b16102676e5d544d2887996b6b

  • SHA1

    0d55efec487bcca7488b4a6dba6dd568fd21b846

  • SHA256

    54415bb6bb53153601096390f84d9306b5476f98b96908ebcf144bd0b7569f57

  • SHA512

    c67b405102f9e21167e2c529cf7f1cf50f1c469e575503276e4a3b1e9cfcd04ed547cd6279757d9967e4754ed1746e4d1c8057788269b71862e531529be1a11c

  • SSDEEP

    384:ZGzk5TqjkV5ULD6GieFVKoyRsSap8yzDE:ZGzk5E/LWGie3eODE

Score
10/10
revengeratgueststealertrojan

Malware Config

Extracted

Family

revengerat

Botnet

Guest

C2

93.83.35.2:4782

Mutex

RV_MUTEX

Targets

    • Target

      5A3FE2B16102676E5D544D2887996B6B.exe

    • Size

      20KB

    • MD5

      5a3fe2b16102676e5d544d2887996b6b

    • SHA1

      0d55efec487bcca7488b4a6dba6dd568fd21b846

    • SHA256

      54415bb6bb53153601096390f84d9306b5476f98b96908ebcf144bd0b7569f57

    • SHA512

      c67b405102f9e21167e2c529cf7f1cf50f1c469e575503276e4a3b1e9cfcd04ed547cd6279757d9967e4754ed1746e4d1c8057788269b71862e531529be1a11c

    • SSDEEP

      384:ZGzk5TqjkV5ULD6GieFVKoyRsSap8yzDE:ZGzk5E/LWGie3eODE

    Score
    10/10
    revengeratgueststealertrojan

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • RevengeRat Executable

      stealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks