General

  • Target
    3a6e2de5b3de6e67229b11f6d74a4f9af70ccec85c2573a905df5a1f84a35446
  • Size 1.9MB
  • Sample240430-dlmarsbd5v
  • SHA256 0edb8931623d2f3d41415128c05d2431279e3eb979bcd2a96064e2b989bb7cb9
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      3a6e2de5b3de6e67229b11f6d74a4f9af70ccec85c2573a905df5a1f84a35446
    • Size 1.9MB
    • SHA256 0edb8931623d2f3d41415128c05d2431279e3eb979bcd2a96064e2b989bb7cb9
    • MD5 SHA1 SHA512 SSDEEP
    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • RevengeRat Executable

    • Modifies Installed Components in the registry

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

MITRE ATT&CK Enterprise v15

Tasks