Overview

overview

10

Static

static

7

3add039f56...18.exe

windows7-x64

10

3add039f56...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3add039f56ea9c3aa3dae272c36ddbcf_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240512-s5np9sfg87

  • MD5

    3add039f56ea9c3aa3dae272c36ddbcf

  • SHA1

    5a4846bcaa21f5401dd3d915b4de718bbdab974d

  • SHA256

    24c51915aef8c021d04f6deaa35ba6456cdf99cb7038ee4027c7e305b88b643b

  • SHA512

    8fa3ae3c4930394f98185ea8497465dbfc5e2a904805a4f43084aef74fe49642dbec8b3d93eea6127d0416824c710a3ae16984b696e4e2b5ad54cc01076fe82c

  • SSDEEP

    24576:eq5TfcdHj4fmb12qd0MmV0VMXLG3on1Gx1s4oo5osSxs:eUTsamhx/o1no5oy

Score
10/10
revengeratstealertrojanupx

Malware Config

Targets

    • Target

      3add039f56ea9c3aa3dae272c36ddbcf_JaffaCakes118

    • Size

      1.1MB

    • MD5

      3add039f56ea9c3aa3dae272c36ddbcf

    • SHA1

      5a4846bcaa21f5401dd3d915b4de718bbdab974d

    • SHA256

      24c51915aef8c021d04f6deaa35ba6456cdf99cb7038ee4027c7e305b88b643b

    • SHA512

      8fa3ae3c4930394f98185ea8497465dbfc5e2a904805a4f43084aef74fe49642dbec8b3d93eea6127d0416824c710a3ae16984b696e4e2b5ad54cc01076fe82c

    • SSDEEP

      24576:eq5TfcdHj4fmb12qd0MmV0VMXLG3on1Gx1s4oo5osSxs:eUTsamhx/o1no5oy

    Score
    10/10
    revengeratstealertrojanupx

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • RevengeRat Executable

      stealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks