Overview

overview

10

Static

static

7

c5d1f49f97...ab.exe

windows7-x64

10

c5d1f49f97...ab.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c5d1f49f97f324bb412e19918ed3e8ab

  • Size

    1.2MB

  • Sample

    240313-n5w97aeb94

  • MD5

    c5d1f49f97f324bb412e19918ed3e8ab

  • SHA1

    326ec2e1f912daea59c0f0e63e1c949c3041d15a

  • SHA256

    10ff4ae8ec79bb4a0af54c8f2b0d3190fc154dd5a91447a27d050bbba0dd5ebc

  • SHA512

    476145196e93021700ae762c0b967b9681d7161c157866de1b8badee3ae2e710dfeead1ababb1705e4339a6ab1c9e20bd7b9746da01d78b7031c704e0d60edfa

  • SSDEEP

    24576:Eq5TfcdHj4fmbC3w2qzY+Ub5LMm/Lpil9KzGvJ6Ls0iB56zeGXw:EUTsamGwxmLpiDSLs0iB5F

Score
10/10
revengeratstealertrojanupx

Malware Config

Targets

    • Target

      c5d1f49f97f324bb412e19918ed3e8ab

    • Size

      1.2MB

    • MD5

      c5d1f49f97f324bb412e19918ed3e8ab

    • SHA1

      326ec2e1f912daea59c0f0e63e1c949c3041d15a

    • SHA256

      10ff4ae8ec79bb4a0af54c8f2b0d3190fc154dd5a91447a27d050bbba0dd5ebc

    • SHA512

      476145196e93021700ae762c0b967b9681d7161c157866de1b8badee3ae2e710dfeead1ababb1705e4339a6ab1c9e20bd7b9746da01d78b7031c704e0d60edfa

    • SSDEEP

      24576:Eq5TfcdHj4fmbC3w2qzY+Ub5LMm/Lpil9KzGvJ6Ls0iB56zeGXw:EUTsamGwxmLpiDSLs0iB5F

    Score
    10/10
    revengeratstealertrojanupx

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • RevengeRat Executable

      stealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks