General

  • Target

    6176f8bb39876ac1546cdbbe83007b3a

  • Size

    39KB

  • Sample

    240117-ckh2aaeggj

  • MD5

    6176f8bb39876ac1546cdbbe83007b3a

  • SHA1

    54c05ebf22aaee78a1b9c839c9490003a527c048

  • SHA256

    9022b5d4a99580efe76326add13f8216629ce60f236b0cc8353114c242a5eaaa

  • SHA512

    b341a47ca86aafbcea61ecc3cefcce8bc6121bd706218a74441a59a6d464450ea0943bdc8efa29d65e31ca8384156608daf7e622d727c454ea06cbd9c4fcee74

  • SSDEEP

    768:BBVMFf2872zFE4cQFv+mHWEp8qhsxEgGEvkOxAEG3ltQM0Jo4yDL85LnUC:nVMFfR74/FKEKqhUE+vk0AjQvir8NX

Malware Config

Extracted

Family

revengerat

Botnet

Guest

C2

127.0.0.1:3333

Mutex

RV_MUTEX-DxjEexVoqqNL

Targets

    • Target

      6176f8bb39876ac1546cdbbe83007b3a

    • Size

      39KB

    • MD5

      6176f8bb39876ac1546cdbbe83007b3a

    • SHA1

      54c05ebf22aaee78a1b9c839c9490003a527c048

    • SHA256

      9022b5d4a99580efe76326add13f8216629ce60f236b0cc8353114c242a5eaaa

    • SHA512

      b341a47ca86aafbcea61ecc3cefcce8bc6121bd706218a74441a59a6d464450ea0943bdc8efa29d65e31ca8384156608daf7e622d727c454ea06cbd9c4fcee74

    • SSDEEP

      768:BBVMFf2872zFE4cQFv+mHWEp8qhsxEgGEvkOxAEG3ltQM0Jo4yDL85LnUC:nVMFfR74/FKEKqhUE+vk0AjQvir8NX

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • RevengeRat Executable

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks