Overview

overview

10

Static

static

5

3a75d69628...1).exe

windows7-x64

10

3a75d69628...1).exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3a75d6962893903bdfc8558485df3e3166989bb5dd5d524d2c5c796f60221f3d_unsafe (copy 1)

  • Size

    1.9MB

  • Sample

    240915-nt4j5asbjc

  • MD5

    768a26a0fb582b456befa2e2c9f353e9

  • SHA1

    5227ae7c346e4db17165e539a40710a3e3818590

  • SHA256

    fb5a48d6b7e7a6d7c0eb8693ef3b69b56431529d393afce8b5d3e76308d70449

  • SHA512

    66630f2df9d3a1341768c3573e90081412384a4317734afc5fa0d5cf258a6030a4e459f35f8c69dcc55718e9df0f80b734f2ff7dfd53a2d627e047445c51c66a

  • SSDEEP

    24576:wtb20pkaCqT5TBWgNjVY10Vp70smVkVMyO7BlWEWEzKJ9TtLs4l0llFJ+o0zQJ9X:5Vg5tjVY1UUle52lF55c56

Score
10/10
revengeratdiscoverystealertrojan

Malware Config

Targets

    • Target

      3a75d6962893903bdfc8558485df3e3166989bb5dd5d524d2c5c796f60221f3d_unsafe (copy 1)

    • Size

      1.9MB

    • MD5

      768a26a0fb582b456befa2e2c9f353e9

    • SHA1

      5227ae7c346e4db17165e539a40710a3e3818590

    • SHA256

      fb5a48d6b7e7a6d7c0eb8693ef3b69b56431529d393afce8b5d3e76308d70449

    • SHA512

      66630f2df9d3a1341768c3573e90081412384a4317734afc5fa0d5cf258a6030a4e459f35f8c69dcc55718e9df0f80b734f2ff7dfd53a2d627e047445c51c66a

    • SSDEEP

      24576:wtb20pkaCqT5TBWgNjVY10Vp70smVkVMyO7BlWEWEzKJ9TtLs4l0llFJ+o0zQJ9X:5Vg5tjVY1UUle52lF55c56

    Score
    10/10
    revengeratdiscoverystealertrojan

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • RevengeRat Executable

      stealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks