revengerat | 156e13c6490c8301b32f8002b493756b705267eb7c5463e673b905fe265f7470 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0D06E78AFDD1A87D0A35F3B63AB9EB51.exe
Size

48KB
Sample

240108-tfrw3adhg4
MD5

0d06e78afdd1a87d0a35f3b63ab9eb51
SHA1

4bb6d7d31b6a8031b0a1fdfa7561739a98ca9c19
SHA256

156e13c6490c8301b32f8002b493756b705267eb7c5463e673b905fe265f7470
SHA512

513c84e8d481f13118538733bb2b9ba3843c321d23463de1fe7e9e09795c631ac3940340bb94a0cce5ebb0e24a536a465040978c7718ee22c02df849fa4771a9
SSDEEP

384:WwCnIBDZN+J90OIYrbBtrqmxq0EKPq13wc2C3qdErIhfBIV5mWsvW:WaZ470OIY3HXEueBqaYIV5U

Score

10^/10

revengerat persistence stealer trojan

Malware Config

Targets

- Target
  
  0D06E78AFDD1A87D0A35F3B63AB9EB51.exe
- Size
  
  48KB
- MD5
  
  0d06e78afdd1a87d0a35f3b63ab9eb51
- SHA1
  
  4bb6d7d31b6a8031b0a1fdfa7561739a98ca9c19
- SHA256
  
  156e13c6490c8301b32f8002b493756b705267eb7c5463e673b905fe265f7470
- SHA512
  
  513c84e8d481f13118538733bb2b9ba3843c321d23463de1fe7e9e09795c631ac3940340bb94a0cce5ebb0e24a536a465040978c7718ee22c02df849fa4771a9
- SSDEEP
  
  384:WwCnIBDZN+J90OIYrbBtrqmxq0EKPq13wc2C3qdErIhfBIV5mWsvW:WaZ470OIY3HXEueBqaYIV5U
Score

10^/10

revengerat persistence stealer trojan
- RevengeRAT
  Remote-access trojan with a wide range of capabilities.
  trojan revengerat
- RevengeRat Executable
  stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

stealerrevengerat

behavioral1

revengeratpersistencestealertrojan

behavioral2

revengeratpersistencestealertrojan