Analysis
-
max time kernel
137s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
12/10/2023, 13:18
General
-
Target
explorer.exe
-
Size
133KB
-
MD5
b5aa442ab77d82842f563148fb7ea482
-
SHA1
867691f6f5dc3a30c53c5ac6623ab0c081db5053
-
SHA256
33f2e43c3d209ede2937d61e006f64eb8ed55cf6a3184f03054940bf7926fd3d
-
SHA512
b6a3066b9b812f122ec85cbcb9cd6860d32915a798cd919346a9c5df5fa1b447947c986a6b721f6b65d141e20ed06e877333812669d74c2f15325561880a947f
-
SSDEEP
3072:LtoX9jlNwmIEcoablKu8WseS7xC3EVbH0hLNM:L49j/dIEWblKpd3BUT
Score
10/10
Malware Config
Signatures
-
RevengeRAT
Remote-access trojan with a wide range of capabilities.
-
RevengeRat Executable 1 IoCs
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\explorer.exe"C:\Users\Admin\AppData\Local\Temp\explorer.exe"1⤵
- Adds Run key to start application
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
152KB
-
Filesize
9.9MB
-
Filesize
512KB
-
Filesize
56KB
-
Filesize
48KB
-
Filesize
9.9MB
-
Filesize
512KB