Extracted

• • Target

    ea6c29e25140c51632d8b25f4b2aa5e5_JaffaCakes118

  • Size

    63KB

  • MD5

    ea6c29e25140c51632d8b25f4b2aa5e5

  • SHA1

    1d85cac90a7a3d8f09135724b3f2c8a6ac2cce45

  • SHA256

    20928297fd7d266b72c08c0b886fc5900a0b1efca0629814d90f62aeabc62b8b

  • SHA512

    8d916cb0e942c49091958f1a9cc67b2ee4d4bf18c281f152182fc4782d2dde1238ed67122dd9c0e950971e0e4de5c0378c795ead3fbfb8eecb4c21dcfd423f42

  • SSDEEP

    768:leJKUdD0+o74/lZJFAzTArPfVvVlD40FIxP6PusbQjZ4+64cE5AI:leAUR0EZ7iTEdvVyPhIQjZJmj

  Score

  10^/10

  revengeratgueststealertrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • RevengeRat Executable

    stealer

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2