Extracted

• • Target

    e1beebd890166e39fa9530f28ed76b0b_JaffaCakes118

  • Size

    17KB

  • MD5

    e1beebd890166e39fa9530f28ed76b0b

  • SHA1

    1e3b7d3ce463ce8227eeca4fd074872d92de4200

  • SHA256

    d6b9a90b9c36ffb66a0bb4014ea50d5904400d774755a7d2edbb38f153b848c5

  • SHA512

    7e7d673e96dab68f2caae76109f56c7c64025dc981a4cfba5e4a7412136e979eea86d74b2635c032e3fa0c1fc6109bb6a58a0786a1778642e7e53ba54273511c

  • SSDEEP

    384:MdL8sAmZn6XNoEIPJvnbisVKxysLu2s2:sLXh6DIRmfa2

  Score

  10^/10

  revengeratpersistencestealertrojanuser

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • RevengeRat Executable

    stealer

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1behavioral2