General

  • Target

    asasdsad.exe

  • Size

    17KB

  • Sample

    240518-2xk4vach55

  • MD5

    b15bf219864e1682be14c2844c35a995

  • SHA1

    775179d5bb8e3b897a486acb374d0ca6763d215d

  • SHA256

    be1f2949e93117724ed26c840b12bedd044d8a914286f80febaa23d71bcdbba7

  • SHA512

    f783868da3063f57e355ff490e9e795197a24bddc04453907c19c36e4d938c48da47defafe027bb6b585334cce560e9ee45d718559f28af732edbfb381051a8f

  • SSDEEP

    384:U0NvDUtGdDvownpo4oEIPJvnbisVK6ybLu2s2:U0NvDoGdEwppIRmBa2

Malware Config

Extracted

Family

revengerat

Botnet

Guest

C2

127.0.0.1:333

Mutex

RV_MUTEX

Targets

    • Target

      asasdsad.exe

    • Size

      17KB

    • MD5

      b15bf219864e1682be14c2844c35a995

    • SHA1

      775179d5bb8e3b897a486acb374d0ca6763d215d

    • SHA256

      be1f2949e93117724ed26c840b12bedd044d8a914286f80febaa23d71bcdbba7

    • SHA512

      f783868da3063f57e355ff490e9e795197a24bddc04453907c19c36e4d938c48da47defafe027bb6b585334cce560e9ee45d718559f28af732edbfb381051a8f

    • SSDEEP

      384:U0NvDUtGdDvownpo4oEIPJvnbisVK6ybLu2s2:U0NvDoGdEwppIRmBa2

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • RevengeRat Executable

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks