Overview

overview

10

Static

static

1

NEAS.36504...a0.exe

windows7-x64

10

NEAS.36504...a0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    NEAS.36504945cb1d37a2c3f0670e264c8ca0.exe
  • Size 166KB
  • Sample231116-ll2dpaba5w
  • SHA256 d7568d03eadad1ac3b020116029245df00d468c244c052e92aa3b970085a1530
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
revengeratspam stealertrojan

Malware Config

Extracted

Family

  • revengerat

Botnet

  • SPAM

C2

  • rampage.myvnc.com:7997

Mutex

  • RV_MUTEX-HLONSnIELecwCkj

Targets

    • Target
      NEAS.36504945cb1d37a2c3f0670e264c8ca0.exe
    • Size 166KB
    • SHA256 d7568d03eadad1ac3b020116029245df00d468c244c052e92aa3b970085a1530
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    revengeratspam stealertrojan

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • RevengeRat Executable

      stealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks