Overview

overview

10

Static

static

1

3bae22073d...18.exe

windows7-x64

10

3bae22073d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3bae22073d75f9ec3dc0292009447306_JaffaCakes118

  • Size

    604KB

  • Sample

    240512-x2eemsfb89

  • MD5

    3bae22073d75f9ec3dc0292009447306

  • SHA1

    3167b62ac31cacf6c798eb147bf8a4568197e4b2

  • SHA256

    23b641de04ec8179cd5ead0b7a8741422fb96dae97996ea76bfc962992e165f5

  • SHA512

    eb2157f95b30d75185728e91e2ff4de4168434a0c39eb4012d4b575ae3032655e1e304d5804dcd5168766ab3b422e92b4be7016dc632985f839d836bf12eeb94

  • SSDEEP

    12288:37lw1Dx0plwfX9F59l3N8aF7ysgfBnnl2Cp:37m1DkuFDl3maF7ysgpnncO

Score
10/10
revengeratstealertrojan

Malware Config

Targets

    • Target

      3bae22073d75f9ec3dc0292009447306_JaffaCakes118

    • Size

      604KB

    • MD5

      3bae22073d75f9ec3dc0292009447306

    • SHA1

      3167b62ac31cacf6c798eb147bf8a4568197e4b2

    • SHA256

      23b641de04ec8179cd5ead0b7a8741422fb96dae97996ea76bfc962992e165f5

    • SHA512

      eb2157f95b30d75185728e91e2ff4de4168434a0c39eb4012d4b575ae3032655e1e304d5804dcd5168766ab3b422e92b4be7016dc632985f839d836bf12eeb94

    • SSDEEP

      12288:37lw1Dx0plwfX9F59l3N8aF7ysgfBnnl2Cp:37m1DkuFDl3maF7ysgpnncO

    Score
    10/10
    revengeratstealertrojan

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • RevengeRat Executable

      stealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks