Overview

overview

10

Static

static

5

df92b3aa0a...e0.exe

windows7-x64

10

df92b3aa0a...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df92b3aa0ac334d4b84aedc74defa4195d2102b79aa33d29282dc754fa3d5fe0

  • Size

    903KB

  • Sample

    240609-nf634aae95

  • MD5

    ae175ff2a4d68b8b79d49d51dda70a36

  • SHA1

    55030b1da2a0120ff1e029d9e39e51b5a2ffc6ce

  • SHA256

    df92b3aa0ac334d4b84aedc74defa4195d2102b79aa33d29282dc754fa3d5fe0

  • SHA512

    68d9dd7aa27bcd08c0b509709d656fb4f2ba8287316e99cc4c277fc21b4a4a8c01e880d79a855c12e4fbbaea315096afe6be3dc60271e2ecc3af48f546e7343a

  • SSDEEP

    24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5m:gh+ZkldoPK8YaKGm

Score
10/10
revengeratmarzo26trojan

Malware Config

Extracted

Family

revengerat

Botnet

Marzo26

C2

marzorevenger.duckdns.org:4230

Mutex

RV_MUTEX-PiGGjjtnxDpn

Targets

    • Target

      df92b3aa0ac334d4b84aedc74defa4195d2102b79aa33d29282dc754fa3d5fe0

    • Size

      903KB

    • MD5

      ae175ff2a4d68b8b79d49d51dda70a36

    • SHA1

      55030b1da2a0120ff1e029d9e39e51b5a2ffc6ce

    • SHA256

      df92b3aa0ac334d4b84aedc74defa4195d2102b79aa33d29282dc754fa3d5fe0

    • SHA512

      68d9dd7aa27bcd08c0b509709d656fb4f2ba8287316e99cc4c277fc21b4a4a8c01e880d79a855c12e4fbbaea315096afe6be3dc60271e2ecc3af48f546e7343a

    • SSDEEP

      24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5m:gh+ZkldoPK8YaKGm

    Score
    10/10
    revengeratmarzo26trojan

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • Drops startup file

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks