revengerat | 7311a31fa32003d435c6f440323b72f439340d7ef8b59bdb1afb642f8b59510a | Triage

Submit
Reports

Overview

overview

Static

static

7

e550ff5183...cs.exe

windows7-x64

e550ff5183...cs.exe

windows10-2004-x64

Sharing

General

Target

e550ff5183f85d599a6529d6c9a7f970_NeikiAnalytics
Size

1.5MB
Sample

240516-t6v2eadh89
MD5

e550ff5183f85d599a6529d6c9a7f970
SHA1

f69323ad6c1721b6fda1a8a13d35a99603a121d5
SHA256

7311a31fa32003d435c6f440323b72f439340d7ef8b59bdb1afb642f8b59510a
SHA512

12d01994c5dc013a116092eff946aefd19e78460bb20448c87598d1d3075e5eedab7aa499b4fc44cded68273b2f4bce0b13132c0ec2b161b6de013c91edabdfe
SSDEEP

24576:4q5TfcdHj4fmb12q2jzKJ9TtrQB1iRIuawWI4FzQJ9TtFO85NVU/1awS+M:4UTsamJxF5TawD5G1awA

Score

10^/10

revengerat stealer trojan upx

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

e550ff5183f85d599a6529d6c9a7f970_NeikiAnalytics.exe

Resource

win7-20240221-en

revengerat stealer trojan upx

windows7-x64

13 signatures

150 seconds

Behavioral task

behavioral2

Sample

e550ff5183f85d599a6529d6c9a7f970_NeikiAnalytics.exe

Resource

win10v2004-20240426-en

revengerat stealer trojan upx

windows10-2004-x64

14 signatures

150 seconds

Malware Config

Targets

- Target
  
  e550ff5183f85d599a6529d6c9a7f970_NeikiAnalytics
- Size
  
  1.5MB
- MD5
  
  e550ff5183f85d599a6529d6c9a7f970
- SHA1
  
  f69323ad6c1721b6fda1a8a13d35a99603a121d5
- SHA256
  
  7311a31fa32003d435c6f440323b72f439340d7ef8b59bdb1afb642f8b59510a
- SHA512
  
  12d01994c5dc013a116092eff946aefd19e78460bb20448c87598d1d3075e5eedab7aa499b4fc44cded68273b2f4bce0b13132c0ec2b161b6de013c91edabdfe
- SSDEEP
  
  24576:4q5TfcdHj4fmb12q2jzKJ9TtrQB1iRIuawWI4FzQJ9TtFO85NVU/1awS+M:4UTsamJxF5TawD5G1awA
Score

10^/10

revengerat stealer trojan upx
- RevengeRAT
  Remote-access trojan with a wide range of capabilities.
  trojan revengerat
- RevengeRat Executable
  stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

revengeratstealertrojanupx

behavioral2

revengeratstealertrojanupx

© 2018-2025

Terms | Privacy