revengerat | 69d054d2fa8f5fcb108ac76205d2f8361ddea1632069cfceba899daa3244d795

General

Target

8210a43afc450e18a80d697a6f923c8c_JaffaCakes118
Size

1.1MB
Sample

240801-2yadqs1dlq
MD5

8210a43afc450e18a80d697a6f923c8c
SHA1

fe7e43c3a1ae644735d46c11abcd05c397eb0a17
SHA256

69d054d2fa8f5fcb108ac76205d2f8361ddea1632069cfceba899daa3244d795
SHA512

51fa173c4a42a35a3c9415fa9f203d5ce263b8de735837661378edc8a517532cd496c02b5a73c92c8e795c6b57e90e874cd01c2a3f46dd7b2453448c6147c748
SSDEEP

24576:TWpr3saN7P7WB1izxQ3RmRsDzcv4Y0SYW92jC79I+93wdYFE:+J7K1UaTzQ0HjmKdp

Score

10^/10

Malware Config

Targets

- Target
  
  HadesKey SE.exe
- Size
  
  769KB
- MD5
  
  6e2475120c6b8897a62f93bf3f757d9f
- SHA1
  
  f2cab685014834e81a7baa4338bd0b2ed910ecd2
- SHA256
  
  046bf49f118e290386fa713b90eed77b14be0e3c519f5e54c8facb928cde8272
- SHA512
  
  1d105542fb5ffe3dc764f676f53cfd436e66a747a787f1a4399ee86f67ef4b803c50673c8df0e5f970463159e1e54c0c1e5e70b0b142915d76204e35db155535
- SSDEEP
  
  12288:sGL0MnO+zd9sNVz/TmUpNMdbU5NpS5R+V63EWD/DnTAWtC5UVwV:VYMnjPsNBKmpS5R+V6UWDDTDtC
Score

6^/10
- Drops desktop.ini file(s)
behavioral1 behavioral2
- Target
  
  HadèsKey - Logs Decrypt.exe
- Size
  
  294KB
- MD5
  
  b966cbc6d7abbe616d2c4a4e22d9bd14
- SHA1
  
  0faeec49a2062a35f07ae6c827ec5b43ebb0a22c
- SHA256
  
  5cbb481b507f93f9bd36ad33c8fc34611ba9f971f31b604996677ef30db612f1
- SHA512
  
  fa8dde5a0e654535e4fb6c1e69426b39aba43362cc078a810e51cda3ebc0715f4d37b440a04ee0340241d54c1d8d5765de89e44c6b9b686939605f9e8d2d2c86
- SSDEEP
  
  6144:wnILD+4PqsxkL6dcnvt6d6q37F12CCo7XOnILD+4PqsxkL6dcnvt6d6q37F12CCo:wnILD+4P5i6dcnvt6d6qLF12CCobOnIx
Score

1^/10
behavioral3 behavioral4
- Target
  
  ReActiveMe.exe
- Size
  
  149KB
- MD5
  
  9e4e14cf1ab81480a83d489901f4d0ec
- SHA1
  
  f6f628a311d07060743187a29f9f21ff615f0f32
- SHA256
  
  70a4e7c6e862b6b7c95b711fbfaae271af7c36f1bcf2c3994c658359da84d8bd
- SHA512
  
  495841a0b43efa44973c0b73c6c61b87ddc8a012bb7ef3ef51fd5fef57bf9ca2df69a99cdbac6fb7374bd96ccf36381d53f60ccfe84f907df72213427eda16cb
- SSDEEP
  
  3072:KBrklLwN9Fr0VFd/dGYD+uL/yHdgrKgsiTCYPbdJdfyRoToo8IcPfNzSKnc:tLwN9F60dgrKgfCYhTt8XN
Score

10^/10

evasion trojan
- UAC bypass
  evasion trojan
- Disables RegEdit via registry modification
  evasion
- Disables Task Manager via registry modification
  evasion
- Checks whether UAC is enabled
  evasion trojan
behavioral5 behavioral6
- Target
  
  Stub.exe
- Size
  
  486KB
- MD5
  
  364c1477a744c7f21a45f919ff3ce22d
- SHA1
  
  6fa4f6eb37f795350ada91c21f14a603301b84ab
- SHA256
  
  727131e77f2ae497e0e593f8eb3734197f12364e894f16f7d9da03b726e7aff0
- SHA512
  
  0139166faa6f7fe2715396f852d91b7130b8987b47cfe22e97872daf6c5c8a2344f181986b627c6e21e03a0f9abdc2e95a3e7778958d837bf949e8b41a97096d
- SSDEEP
  
  6144:ofyuEn2FoC2LTGzSLOwzTlFh/eHYwxTlx24PXB0I0+CDDmdZMOIv9vsZ6E/LZVf:ofPEq2TaKTPhWHLwhDDmIGcED
Score

1^/10
behavioral7 behavioral8