Overview

overview

10

Static

static

7

5ae94a44f9...18.exe

windows7-x64

10

5ae94a44f9...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5ae94a44f940470041406d034a70a88e_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240519-xhssxscf41

  • MD5

    5ae94a44f940470041406d034a70a88e

  • SHA1

    041fa65374fe0312e8c05b0aacb52922db3ebf68

  • SHA256

    069dda54e9ed04b61fab601cd04890915ac043a7cdee959d879a529bfb5d0256

  • SHA512

    7f72923d480cd98a292c32e9765f217df2822bd72e26361f2afdc82dc80f292b72a0dfaa0f3e18d961372f8f46cd6bc6b4c92c4ab705775e07b5fe353070ba3e

  • SSDEEP

    24576:Iq5TfcdHj4fmb02qp0MmV0VMXLG3on1Gx1s4oo5osSx5:IUTsamQxLo1no5oL

Score
10/10
revengeratstealertrojanupx

Malware Config

Targets

    • Target

      5ae94a44f940470041406d034a70a88e_JaffaCakes118

    • Size

      1.1MB

    • MD5

      5ae94a44f940470041406d034a70a88e

    • SHA1

      041fa65374fe0312e8c05b0aacb52922db3ebf68

    • SHA256

      069dda54e9ed04b61fab601cd04890915ac043a7cdee959d879a529bfb5d0256

    • SHA512

      7f72923d480cd98a292c32e9765f217df2822bd72e26361f2afdc82dc80f292b72a0dfaa0f3e18d961372f8f46cd6bc6b4c92c4ab705775e07b5fe353070ba3e

    • SSDEEP

      24576:Iq5TfcdHj4fmb02qp0MmV0VMXLG3on1Gx1s4oo5osSx5:IUTsamQxLo1no5oL

    Score
    10/10
    revengeratstealertrojanupx

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • RevengeRat Executable

      stealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks