General

  • Target

    9f5f2fc905270a6f6c952c52f9b438b9_JaffaCakes118

  • Size

    23KB

  • Sample

    240816-wjje7s1hrn

  • MD5

    9f5f2fc905270a6f6c952c52f9b438b9

  • SHA1

    66386b1e39842a9f843183829e8546fc82a61b16

  • SHA256

    56cd5749a3f4a237918a7a61488027f32daa321ff5bf4b7505cef0e4fa91a5b2

  • SHA512

    ea8d3d1937cfdd010b1ac6831eb7c77f32db2cf30eeb25919f7de1124f44eb7e07ef7a662ca33af63628b6405b1497dbc067673e6602793971a79adb85d231a6

  • SSDEEP

    384:sCZ5e7YUiTUzj+GKew9wWip5ToZzKAD1Cvvo6JcF9MzaC:K5iTUMeO1ss50A6mFSzR

Malware Config

Extracted

Family

revengerat

Mutex

Targets

    • Target

      9f5f2fc905270a6f6c952c52f9b438b9_JaffaCakes118

    • Size

      23KB

    • MD5

      9f5f2fc905270a6f6c952c52f9b438b9

    • SHA1

      66386b1e39842a9f843183829e8546fc82a61b16

    • SHA256

      56cd5749a3f4a237918a7a61488027f32daa321ff5bf4b7505cef0e4fa91a5b2

    • SHA512

      ea8d3d1937cfdd010b1ac6831eb7c77f32db2cf30eeb25919f7de1124f44eb7e07ef7a662ca33af63628b6405b1497dbc067673e6602793971a79adb85d231a6

    • SSDEEP

      384:sCZ5e7YUiTUzj+GKew9wWip5ToZzKAD1Cvvo6JcF9MzaC:K5iTUMeO1ss50A6mFSzR

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • RevengeRat Executable

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks