Overview

overview

10

Static

static

10

63af5f7975...18.exe

windows7-x64

10

63af5f7975...18.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    63af5f7975cc09d8c262f73b283e7e75_JaffaCakes118

  • Size

    173KB

  • Sample

    240401-bn62vahg96

  • MD5

    63af5f7975cc09d8c262f73b283e7e75

  • SHA1

    ab423e316469d311b145cedfb62d1a44a463ead4

  • SHA256

    f126b520127b77674aa45cb34a28d61b7c442808801eafbf26352d05e459ef3f

  • SHA512

    e86339e320acabbaaad197fb05e489dec46eef55f4967bad65506fb4a854885325de618a60a7b84a128743e2c252adfed7644edeb691169317cb0f2495369bdd

  • SSDEEP

    1536:c9oSzLN0uUsyaObcsrEzBTTUphYjevWRyFMqIDH:8oSzphUU9BTgYaWYiqIDH

Score
10/10
revengeratstealertrojan

Malware Config

Targets

    • Target

      63af5f7975cc09d8c262f73b283e7e75_JaffaCakes118

    • Size

      173KB

    • MD5

      63af5f7975cc09d8c262f73b283e7e75

    • SHA1

      ab423e316469d311b145cedfb62d1a44a463ead4

    • SHA256

      f126b520127b77674aa45cb34a28d61b7c442808801eafbf26352d05e459ef3f

    • SHA512

      e86339e320acabbaaad197fb05e489dec46eef55f4967bad65506fb4a854885325de618a60a7b84a128743e2c252adfed7644edeb691169317cb0f2495369bdd

    • SSDEEP

      1536:c9oSzLN0uUsyaObcsrEzBTTUphYjevWRyFMqIDH:8oSzphUU9BTgYaWYiqIDH

    Score
    10/10
    revengeratstealertrojan

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • RevengeRat Executable

      stealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks