revengerat | 6d7516fe69e0dd2f9399bd04fecc0fcb3cfc7eb0a87eea799d8f7d8ada1c3400 | Triage

Submit
Reports

Overview

overview

Static

static

7

1ce4f9aa12...18.exe

windows7-x64

1ce4f9aa12...18.exe

windows10-2004-x64

Sharing

General

Target

1ce4f9aa121cae10e960ecb824d787b2_JaffaCakes118
Size

1.5MB
Sample

240506-rmm6cahc84
MD5

1ce4f9aa121cae10e960ecb824d787b2
SHA1

d659868e019c741bb80dbcf60336277bf759ea2e
SHA256

6d7516fe69e0dd2f9399bd04fecc0fcb3cfc7eb0a87eea799d8f7d8ada1c3400
SHA512

d882ad4d1276062434f81d93ea2e57477f7bb4231fb8256efd3f0a6902d3c4f9880307d8b9bd35cb04a107004e4b2014092f164698fbcf8889c4a60f7059d3f3
SSDEEP

24576:2q5TfcdHj4fmb22qVjzKJ9Ttrd0IT7fify/jdfcFzQJ9TtFM6VRAjdMgI:2UTsamixk5Vjd75+jdI

Score

10^/10

revengerat stealer trojan upx

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

1ce4f9aa121cae10e960ecb824d787b2_JaffaCakes118.exe

Resource

win7-20240215-en

revengerat stealer trojan upx

windows7-x64

14 signatures

150 seconds

Behavioral task

behavioral2

Sample

1ce4f9aa121cae10e960ecb824d787b2_JaffaCakes118.exe

Resource

win10v2004-20240419-en

revengerat stealer trojan upx

windows10-2004-x64

13 signatures

150 seconds

Malware Config

Targets

- Target
  
  1ce4f9aa121cae10e960ecb824d787b2_JaffaCakes118
- Size
  
  1.5MB
- MD5
  
  1ce4f9aa121cae10e960ecb824d787b2
- SHA1
  
  d659868e019c741bb80dbcf60336277bf759ea2e
- SHA256
  
  6d7516fe69e0dd2f9399bd04fecc0fcb3cfc7eb0a87eea799d8f7d8ada1c3400
- SHA512
  
  d882ad4d1276062434f81d93ea2e57477f7bb4231fb8256efd3f0a6902d3c4f9880307d8b9bd35cb04a107004e4b2014092f164698fbcf8889c4a60f7059d3f3
- SSDEEP
  
  24576:2q5TfcdHj4fmb22qVjzKJ9Ttrd0IT7fify/jdfcFzQJ9TtFM6VRAjdMgI:2UTsamixk5Vjd75+jdI
Score

10^/10

revengerat stealer trojan upx
- RevengeRAT
  Remote-access trojan with a wide range of capabilities.
  trojan revengerat
- RevengeRat Executable
  stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

revengeratstealertrojanupx

behavioral2

revengeratstealertrojanupx

© 2018-2025

Terms | Privacy