Overview

overview

10

Static

static

7

68940a54cb...18.exe

windows7-x64

10

68940a54cb...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    68940a54cb0bfcffde25a056eef84892_JaffaCakes118

  • Size

    1.3MB

  • Sample

    240522-zk72qsga3x

  • MD5

    68940a54cb0bfcffde25a056eef84892

  • SHA1

    e64c2a1f319af767253c847c2efeb16491a3b835

  • SHA256

    65941167d24401b7fdc37c42f38c1d02ebcff7e20e9364e7904492c00ada5ae7

  • SHA512

    b19e265f70c2a5fb2d0a251d7dc2890981077d51bb88daf317945155914a7ef7ba63e1413e78daddd51e3ec6eed30ffaf5e6074a1be6f5c447306b9c6d816523

  • SSDEEP

    24576:iq5TfcdHj4fmbpD2qJ+Vf3oVGUG5y6zl8O3uXWVpA4yozB1F:iUTsamRx4f3oVGUGfuXYAI

Score
10/10
revengeratstealertrojanupx

Malware Config

Targets

    • Target

      68940a54cb0bfcffde25a056eef84892_JaffaCakes118

    • Size

      1.3MB

    • MD5

      68940a54cb0bfcffde25a056eef84892

    • SHA1

      e64c2a1f319af767253c847c2efeb16491a3b835

    • SHA256

      65941167d24401b7fdc37c42f38c1d02ebcff7e20e9364e7904492c00ada5ae7

    • SHA512

      b19e265f70c2a5fb2d0a251d7dc2890981077d51bb88daf317945155914a7ef7ba63e1413e78daddd51e3ec6eed30ffaf5e6074a1be6f5c447306b9c6d816523

    • SSDEEP

      24576:iq5TfcdHj4fmbpD2qJ+Vf3oVGUG5y6zl8O3uXWVpA4yozB1F:iUTsamRx4f3oVGUGfuXYAI

    Score
    10/10
    revengeratstealertrojanupx

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • RevengeRat Executable

      stealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks