General
-
Target
e18ec27f09521152664d6a5aad14f03e
-
Size
173KB
-
Sample
240327-nlzk7sbb23
-
MD5
e18ec27f09521152664d6a5aad14f03e
-
SHA1
747bbc767b7a4aedc13a6b2d2f0a8a63363fc91c
-
SHA256
1ee3e5b5f7b2deb6182a591e94890786e404054e536dc468960d941c733d1e00
-
SHA512
3180a6de45526927ea7099b52a7c191ac1e4e6bff1fb55f1e03f7369ef6a316ff7a93ee533aa587c0ecb03e3f604e449ae8fd8547bd99aff7ea8382e98d4138b
-
SSDEEP
3072:YWzzzZKkF8xgsfifWFDZxbvPtj006jxyLNPs4EzhiXJbH5HGWSu9igjc:FDQg8uFUlxbvVjqjNuJbH5Hyn
Behavioral task
behavioral1
Sample
e18ec27f09521152664d6a5aad14f03e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e18ec27f09521152664d6a5aad14f03e.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
e18ec27f09521152664d6a5aad14f03e
-
Size
173KB
-
MD5
e18ec27f09521152664d6a5aad14f03e
-
SHA1
747bbc767b7a4aedc13a6b2d2f0a8a63363fc91c
-
SHA256
1ee3e5b5f7b2deb6182a591e94890786e404054e536dc468960d941c733d1e00
-
SHA512
3180a6de45526927ea7099b52a7c191ac1e4e6bff1fb55f1e03f7369ef6a316ff7a93ee533aa587c0ecb03e3f604e449ae8fd8547bd99aff7ea8382e98d4138b
-
SSDEEP
3072:YWzzzZKkF8xgsfifWFDZxbvPtj006jxyLNPs4EzhiXJbH5HGWSu9igjc:FDQg8uFUlxbvVjqjNuJbH5Hyn
Score10/10-
RevengeRat Executable
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-