Overview

overview

10

Static

static

5

d8b0903079...fd.exe

windows7-x64

10

d8b0903079...fd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d8b0903079bfbac522c22da6444bd7228fda4fab5ab2c649838cc64b02d957fd

  • Size

    903KB

  • Sample

    240515-eaxsssff9x

  • MD5

    a0637d87a3301db5fce7413dccf283f5

  • SHA1

    9e305c94d4a3f1307286c5f3417c2f4b7875d640

  • SHA256

    d8b0903079bfbac522c22da6444bd7228fda4fab5ab2c649838cc64b02d957fd

  • SHA512

    09e9faf59450c0f9fd344840cd4e171f2edb97b5842300bc8d68344be82d2f6492ee00e3a45d94a310ec06ab06a7d628516dd470b12967bc65864511ea7e4a3f

  • SSDEEP

    24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5k:gh+ZkldoPK8YaKGk

Score
10/10
revengeratmarzo26trojan

Malware Config

Extracted

Family

revengerat

Botnet

Marzo26

C2

marzorevenger.duckdns.org:4230

Mutex

RV_MUTEX-PiGGjjtnxDpn

Targets

    • Target

      d8b0903079bfbac522c22da6444bd7228fda4fab5ab2c649838cc64b02d957fd

    • Size

      903KB

    • MD5

      a0637d87a3301db5fce7413dccf283f5

    • SHA1

      9e305c94d4a3f1307286c5f3417c2f4b7875d640

    • SHA256

      d8b0903079bfbac522c22da6444bd7228fda4fab5ab2c649838cc64b02d957fd

    • SHA512

      09e9faf59450c0f9fd344840cd4e171f2edb97b5842300bc8d68344be82d2f6492ee00e3a45d94a310ec06ab06a7d628516dd470b12967bc65864511ea7e4a3f

    • SSDEEP

      24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5k:gh+ZkldoPK8YaKGk

    Score
    10/10
    revengeratmarzo26trojan

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • Drops startup file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks