General

  • Target

    Vape Launcher.exe

  • Size

    60.0MB

  • Sample

    240510-2gb61agd35

  • MD5

    ec5e97f0f1bae61fbe6f957d8f7a07a5

  • SHA1

    72004698b16a8cc0edee3f4c726eafde096740dc

  • SHA256

    acd190c809175cd9bf218d8a748f497842c1de97631a0b83a89dca2af514d6a5

  • SHA512

    8e7352293615f4c0d27e496038930c548afecdd8ebc0b357c0ace22fb42c515d12c452253545a6313d1137f3f51c8049ea84a32264600326aed637a4d0be72ae

  • SSDEEP

    1572864:6HNfIc/bDS7YL3iUqekIR681ttq+NDVK3ZiFx4mdSG:6Zzz+7stopJwCmIG

Malware Config

Targets

    • Target

      Vape Launcher.exe

    • Size

      60.0MB

    • MD5

      ec5e97f0f1bae61fbe6f957d8f7a07a5

    • SHA1

      72004698b16a8cc0edee3f4c726eafde096740dc

    • SHA256

      acd190c809175cd9bf218d8a748f497842c1de97631a0b83a89dca2af514d6a5

    • SHA512

      8e7352293615f4c0d27e496038930c548afecdd8ebc0b357c0ace22fb42c515d12c452253545a6313d1137f3f51c8049ea84a32264600326aed637a4d0be72ae

    • SSDEEP

      1572864:6HNfIc/bDS7YL3iUqekIR681ttq+NDVK3ZiFx4mdSG:6Zzz+7stopJwCmIG

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • RevengeRat Executable

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks