Overview

overview

10

Static

static

10

43aa68d644...18.exe

windows7-x64

6

43aa68d644...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    43aa68d644e46c7b67071b2027c737f9_JaffaCakes118

  • Size

    16KB

  • Sample

    240729-nl4vxswfnk

  • MD5

    43aa68d644e46c7b67071b2027c737f9

  • SHA1

    75705c5a84699ac1ce8247659060898fc044153f

  • SHA256

    6c7b41c48ec91a1d533b4a8ce8837cc5f9326842441c44ecd7400f662bdde16d

  • SHA512

    ef3c97cd738ce9443f6f34c84bbb24d1ebdac33047f8879d880870d308103ecb4929adf2c63d97368b3497ca0497b9f851aceb8f3f9a95d28eef6eb8230f0c02

  • SSDEEP

    384:OZilPqtlJES8uj9vxJAd3pNcClb5s8dXihym5Ct:OZilPqtlFfFL63pNrLwo

Score
10/10
revengeratparrot-securitystealer

Malware Config

Extracted

Family

revengerat

Botnet

PARROT-SECURITY

C2

2.tcp.ngrok.io:18683

Mutex

RV_MUTEX-jyGqgkYeCTBpMCv

Targets

    • Target

      43aa68d644e46c7b67071b2027c737f9_JaffaCakes118

    • Size

      16KB

    • MD5

      43aa68d644e46c7b67071b2027c737f9

    • SHA1

      75705c5a84699ac1ce8247659060898fc044153f

    • SHA256

      6c7b41c48ec91a1d533b4a8ce8837cc5f9326842441c44ecd7400f662bdde16d

    • SHA512

      ef3c97cd738ce9443f6f34c84bbb24d1ebdac33047f8879d880870d308103ecb4929adf2c63d97368b3497ca0497b9f851aceb8f3f9a95d28eef6eb8230f0c02

    • SSDEEP

      384:OZilPqtlJES8uj9vxJAd3pNcClb5s8dXihym5Ct:OZilPqtlFfFL63pNrLwo

    Score
    6/10

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks