revengerat | 16b4664969ce27b9914dc9d41b5baa16a341e00f442527efffd478a73a014fa1 | Triage

Resubmissions

03-08-2024 22:30

240803-2evwbsxemn 10

03-08-2024 21:31

240803-1day4awcjj 10

03-08-2024 21:20

240803-z679mawaln 10

03-08-2024 21:04

240803-zwppjavfnp 10

03-08-2024 20:57

240803-zrnaxavepm 10

03-08-2024 20:27

240803-y8sfhsvanl 10

09-12-2021 20:37

211209-zeh6esfcfq 10

Sharing

General

Target

FreeBitco.in Next Roll Prediction (Trial 1 Day).bin
Size

988KB
Sample

240803-1day4awcjj
MD5

afb30fed336e9b1e5e8ea5d941691b2a
SHA1

afeb330ea75da11608bc4f32d3490ed38cfd4c11
SHA256

16b4664969ce27b9914dc9d41b5baa16a341e00f442527efffd478a73a014fa1
SHA512

f509ae85f1e0cb7d1803f5d84f43cf58ec8363e816614b1668ae7ae5bbb86547ec507776022dcb9ba3bf776837e17e72816208bb2a8e790eef0c807131b6b27a
SSDEEP

24576:MAHnh+eWsN3skA4RV1Hom2KXMmHaYfNZ8tvDej5:rh+ZkldoPK8YaYlZ81q

Score

10^/10

revengerat discovery persistence stealer trojan

Malware Config

Targets

- Target
  
  FreeBitco.in Next Roll Prediction (Trial 1 Day).bin
- Size
  
  988KB
- MD5
  
  afb30fed336e9b1e5e8ea5d941691b2a
- SHA1
  
  afeb330ea75da11608bc4f32d3490ed38cfd4c11
- SHA256
  
  16b4664969ce27b9914dc9d41b5baa16a341e00f442527efffd478a73a014fa1
- SHA512
  
  f509ae85f1e0cb7d1803f5d84f43cf58ec8363e816614b1668ae7ae5bbb86547ec507776022dcb9ba3bf776837e17e72816208bb2a8e790eef0c807131b6b27a
- SSDEEP
  
  24576:MAHnh+eWsN3skA4RV1Hom2KXMmHaYfNZ8tvDej5:rh+ZkldoPK8YaYlZ81q
Score

10^/10

revengerat discovery persistence stealer trojan
- RevengeRAT
  Remote-access trojan with a wide range of capabilities.
  trojan revengerat
- RevengeRat Executable
  stealer
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

revengeratdiscoverypersistencestealertrojan

behavioral2

revengeratdiscoverypersistencestealertrojan