General

  • Target

    fab060854959752071dd189e5e8f02ed_JaffaCakes118

  • Size

    578KB

  • Sample

    240927-s7452azclq

  • MD5

    fab060854959752071dd189e5e8f02ed

  • SHA1

    08d9ec618c6c9e6d3544c9877edb63575981aba3

  • SHA256

    0609543d20e58f2d96e03d4a87a04dfb37f59b12f47b0f752327c1db06e37b0c

  • SHA512

    edd8f4baccb95e25f771e1e9d077aa1fa1290d4fd467b5e54944c37673f40b05e499253ef1a74d09991fd8678fd9b44143b6bab2e09ade7b29705029d4088c2b

  • SSDEEP

    6144:UKlr3FcfCElJk125U8SpVUagDsvb6mgmw4sFfTysVufBn597NX2I:UqVcfXlJkE5YVUjuOjysgfBnnl2I

Malware Config

Targets

    • Target

      fab060854959752071dd189e5e8f02ed_JaffaCakes118

    • Size

      578KB

    • MD5

      fab060854959752071dd189e5e8f02ed

    • SHA1

      08d9ec618c6c9e6d3544c9877edb63575981aba3

    • SHA256

      0609543d20e58f2d96e03d4a87a04dfb37f59b12f47b0f752327c1db06e37b0c

    • SHA512

      edd8f4baccb95e25f771e1e9d077aa1fa1290d4fd467b5e54944c37673f40b05e499253ef1a74d09991fd8678fd9b44143b6bab2e09ade7b29705029d4088c2b

    • SSDEEP

      6144:UKlr3FcfCElJk125U8SpVUagDsvb6mgmw4sFfTysVufBn597NX2I:UqVcfXlJkE5YVUjuOjysgfBnnl2I

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • RevengeRat Executable

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks