Overview

overview

10

Static

static

3

35fe14ca48...0N.exe

windows7-x64

10

35fe14ca48...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    35fe14ca48ab0b792b3f8934988512e0N
  • Size 147KB
  • Sample240908-llql7aycql
  • SHA256 62414879eaa4f41a799b2e08dc86aa8375055c9d731a587f8e3a78c29957dc29
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
revengeratguestdiscoverystealertrojan

Malware Config

Extracted

Family

  • revengerat

Botnet

  • Guest

C2

  • 127.0.0.1:4444

  • 127.0.0.1:1337

  • 192.168.1.3:4444

  • 192.168.1.3:1337

  • 192.168.137.1:4444

  • 192.168.137.1:1337

  • 192.168.1.2:4444

  • 192.168.1.2:1337

Mutex

  • RV_MUTEX

Targets

    • Target
      35fe14ca48ab0b792b3f8934988512e0N
    • Size 147KB
    • SHA256 62414879eaa4f41a799b2e08dc86aa8375055c9d731a587f8e3a78c29957dc29
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    revengeratguestdiscoverystealertrojan

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • RevengeRat Executable

      stealer

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks