revengerat

General

Target

f976198585759fa3eafbd852ac1bdd83_JaffaCakes118
Size

1.4MB
Sample

240927-bref1axhjj
MD5

f976198585759fa3eafbd852ac1bdd83
SHA1

12381c5842a035c22d4f401e80ca85c8b8200542
SHA256

7b860ae6851ace6b7f107bf685e82e71d283627837223a8746f59ece8eeedcf0
SHA512

6328e2dfb8419442be74a1de781f02d355773e8c43056e9bdc94c51e759db008f9785557f035c91d99abca74dc2f55b2dce19aaa7f6c6aa0653a8cdaa9966f4b
SSDEEP

24576:yq5TfcdHj4fmbk2q4EzKJ9Ttr60lYYtWY2YPGO0zQJ9TtFaLnUMvkYtWYnYPqW:yUTsam4x+5IYtWY2YPJ5DYtWYnYP

Score

10^/10

Malware Config

Targets

- Target
  
  f976198585759fa3eafbd852ac1bdd83_JaffaCakes118
- Size
  
  1.4MB
- MD5
  
  f976198585759fa3eafbd852ac1bdd83
- SHA1
  
  12381c5842a035c22d4f401e80ca85c8b8200542
- SHA256
  
  7b860ae6851ace6b7f107bf685e82e71d283627837223a8746f59ece8eeedcf0
- SHA512
  
  6328e2dfb8419442be74a1de781f02d355773e8c43056e9bdc94c51e759db008f9785557f035c91d99abca74dc2f55b2dce19aaa7f6c6aa0653a8cdaa9966f4b
- SSDEEP
  
  24576:yq5TfcdHj4fmbk2q4EzKJ9Ttr60lYYtWY2YPGO0zQJ9TtFaLnUMvkYtWYnYPqW:yUTsam4x+5IYtWY2YPJ5DYtWYnYP
Score

10^/10

revengerat discovery stealer trojan upx
- RevengeRAT
  Remote-access trojan with a wide range of capabilities.
  trojan revengerat
- RevengeRat Executable
  stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

RevengeRat Executable

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

AutoIT Executable

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2