revengerat | 257e4c94a89f643675ac749c47c9ab6aaf35a71f68fe27b8ad13068209966646 | Triage

Submit
Reports

Overview

overview

Static

static

be981e8c2a...18.exe

windows7-x64

be981e8c2a...18.exe

windows10-2004-x64

Sharing

General

Target

be981e8c2a43e58bc1d2033366451055_JaffaCakes118
Size

97KB
Sample

240824-ppzk2ssajr
MD5

be981e8c2a43e58bc1d2033366451055
SHA1

e238675da9ddd2dce9302c34eb3944c1b2724bd3
SHA256

257e4c94a89f643675ac749c47c9ab6aaf35a71f68fe27b8ad13068209966646
SHA512

e4f59a708d23123fe9b5ae6287fb2bef37cf1dd141c0aee986235238d420f3d3bf96b3cf6666c5671f2dfe0ae30bc632dc19e35653c3f93e7bfe4537bcb7eef8
SSDEEP

1536:j7uEipr5Jvov7UJlF2+aaaUHMdgHW94Az5OCxEdGC8KiJOaP8PwrVo:jqEXUJlF2+raEAcFdCxEdoVwYvS

Score

10^/10

revengerat discovery stealer trojan

Static task

static1

stealer revengerat

3 signatures

Behavioral task

behavioral1

Sample

be981e8c2a43e58bc1d2033366451055_JaffaCakes118.exe

Resource

win7-20240704-en

revengerat discovery stealer trojan

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

be981e8c2a43e58bc1d2033366451055_JaffaCakes118.exe

Resource

win10v2004-20240802-en

revengerat discovery stealer trojan

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  be981e8c2a43e58bc1d2033366451055_JaffaCakes118
- Size
  
  97KB
- MD5
  
  be981e8c2a43e58bc1d2033366451055
- SHA1
  
  e238675da9ddd2dce9302c34eb3944c1b2724bd3
- SHA256
  
  257e4c94a89f643675ac749c47c9ab6aaf35a71f68fe27b8ad13068209966646
- SHA512
  
  e4f59a708d23123fe9b5ae6287fb2bef37cf1dd141c0aee986235238d420f3d3bf96b3cf6666c5671f2dfe0ae30bc632dc19e35653c3f93e7bfe4537bcb7eef8
- SSDEEP
  
  1536:j7uEipr5Jvov7UJlF2+aaaUHMdgHW94Az5OCxEdGC8KiJOaP8PwrVo:jqEXUJlF2+raEAcFdCxEdoVwYvS
Score

10^/10

revengerat discovery stealer trojan
- RevengeRAT
  Remote-access trojan with a wide range of capabilities.
  trojan revengerat
- RevengeRat Executable
  stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

stealerrevengerat

behavioral1

revengeratdiscoverystealertrojan

behavioral2

revengeratdiscoverystealertrojan

© 2018-2024

Terms | Privacy