General

  • Target

    f3639576959eef4ff0fd9c6a8e2bb5d4_JaffaCakes118

  • Size

    600KB

  • Sample

    240924-l2ql5atemc

  • MD5

    f3639576959eef4ff0fd9c6a8e2bb5d4

  • SHA1

    fe91072ac74a0863eba817ee4b85381fe5c068ef

  • SHA256

    21b2e07658c923960711b27ff56e88fb938baa7b8b798060ac4bf5ac33d8a36a

  • SHA512

    afe177b75ffe2debf3c9d3955b50a3d003c051d4d07981f646753f45d93186dc96fdb58fcabf1fe37361063942324ace966851e89543c1a0e9f1d36ba90c7f87

  • SSDEEP

    6144:nKWlw1Dx+UASQFfCEv2YUMNJlaJuNlK17Y4c83fhysVufBn597NX2:n7lw1DxT5QFfXeYU43fiysgfBnnl2

Malware Config

Targets

    • Target

      f3639576959eef4ff0fd9c6a8e2bb5d4_JaffaCakes118

    • Size

      600KB

    • MD5

      f3639576959eef4ff0fd9c6a8e2bb5d4

    • SHA1

      fe91072ac74a0863eba817ee4b85381fe5c068ef

    • SHA256

      21b2e07658c923960711b27ff56e88fb938baa7b8b798060ac4bf5ac33d8a36a

    • SHA512

      afe177b75ffe2debf3c9d3955b50a3d003c051d4d07981f646753f45d93186dc96fdb58fcabf1fe37361063942324ace966851e89543c1a0e9f1d36ba90c7f87

    • SSDEEP

      6144:nKWlw1Dx+UASQFfCEv2YUMNJlaJuNlK17Y4c83fhysVufBn597NX2:n7lw1DxT5QFfXeYU43fiysgfBnnl2

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • RevengeRat Executable

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks