General

  • Target

    5a3fe2b16102676e5d544d2887996b6b.bin

  • Size

    9KB

  • Sample

    231010-b2gzwahh2v

  • MD5

    1e49c6853804b366c1a86e7526cdfc43

  • SHA1

    b9eaa6736c629d029dc7165d363f22798d8da6d1

  • SHA256

    ef46c48b671138bfbfb585bb0234aeded02cf0307840ea2d490c6c106d14b9db

  • SHA512

    6f44e5d89b4f9556209fd5db83db95044940965e080a436070d43b0d04d851e1db91471dcea9a8bbb56fa88e1812cae3f24df293fd41b1834231c1ec840779ea

  • SSDEEP

    192:wP9H7fyETIJF8T2OPibtkAtmY0Y/FgE1CP9nyZjjx3:wPxfyAIJKTS6qmeeE1CP9ydj5

Malware Config

Extracted

Family

revengerat

Botnet

Guest

C2

93.83.35.2:4782

Mutex

RV_MUTEX

Targets

    • Target

      54415bb6bb53153601096390f84d9306b5476f98b96908ebcf144bd0b7569f57.exe

    • Size

      20KB

    • MD5

      5a3fe2b16102676e5d544d2887996b6b

    • SHA1

      0d55efec487bcca7488b4a6dba6dd568fd21b846

    • SHA256

      54415bb6bb53153601096390f84d9306b5476f98b96908ebcf144bd0b7569f57

    • SHA512

      c67b405102f9e21167e2c529cf7f1cf50f1c469e575503276e4a3b1e9cfcd04ed547cd6279757d9967e4754ed1746e4d1c8057788269b71862e531529be1a11c

    • SSDEEP

      384:ZGzk5TqjkV5ULD6GieFVKoyRsSap8yzDE:ZGzk5E/LWGie3eODE

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • RevengeRat Executable

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks