General
-
Target
96bd4b8114e4705fe3c92c77dd9f37c9_JaffaCakes118
-
Size
75KB
-
Sample
240814-tm84xs1crc
-
MD5
96bd4b8114e4705fe3c92c77dd9f37c9
-
SHA1
a73f4e52ffeea5331afe05845a19957ee34c06b0
-
SHA256
4f32a6f4b20635fc3e1e4c751275f1d0053a60d960ae6c769c49c84cdc5de808
-
SHA512
adee56894c5df3054ce2347947a1d311cce5b67af75b6122e90a52f2ce41c6121577e2938cd7d66c325bb40d8926acafbb620b593b98d1e491278c723b3b8b93
-
SSDEEP
1536:H53LC/uz4I7b10vNLSaIFrEAP0HSPLibo81hZgeO:Z3LIlSNrEA8HSgzw
Static task
static1
Behavioral task
behavioral1
Sample
96bd4b8114e4705fe3c92c77dd9f37c9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
96bd4b8114e4705fe3c92c77dd9f37c9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
revengerat
GUY
h4x000r.duckdns.org:3333
RV_MUTEX-SZblRvZwfRtNHu
Targets
-
-
Target
96bd4b8114e4705fe3c92c77dd9f37c9_JaffaCakes118
-
Size
75KB
-
MD5
96bd4b8114e4705fe3c92c77dd9f37c9
-
SHA1
a73f4e52ffeea5331afe05845a19957ee34c06b0
-
SHA256
4f32a6f4b20635fc3e1e4c751275f1d0053a60d960ae6c769c49c84cdc5de808
-
SHA512
adee56894c5df3054ce2347947a1d311cce5b67af75b6122e90a52f2ce41c6121577e2938cd7d66c325bb40d8926acafbb620b593b98d1e491278c723b3b8b93
-
SSDEEP
1536:H53LC/uz4I7b10vNLSaIFrEAP0HSPLibo81hZgeO:Z3LIlSNrEA8HSgzw
Score10/10-
RevengeRat Executable
-
Suspicious use of SetThreadContext
-