Resubmissions

25/04/2024, 16:38

240425-t5ctfacg4810

25/04/2024, 14:35

240425-ryg4gabf9510

General

  • Target
    advbattoexeconverter.exe
  • Size 804KB
  • Sample240425-ryg4gabf95
  • SHA256 af09248cb756488850f9e6f9a7a00149005bf47a9b2087b792ff6bd937297ffb
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • revengerat

Botnet
  • NyanCatRevenge

C2
  • 127.0.0.1:333

Mutex
  • 76e926244ca54b3

Targets

    • Target
      advbattoexeconverter.exe
    • Size 804KB
    • SHA256 af09248cb756488850f9e6f9a7a00149005bf47a9b2087b792ff6bd937297ffb
    • MD5 SHA1 SHA512 SSDEEP
    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks