revengerat | 5a810a0b7402b9023f8c5016d0341a5070ef1ce52f0b124b6ced8a3846e54c83 | Triage

Sharing

General

Target

5a810a0b7402b9023f8c5016d0341a5070ef1ce52f0b124b6ced8a3846e54c83.exe
Size

14KB
Sample

240927-wls3estbkn
MD5

cc801055c454f393abfd2711a6b92674
SHA1

d5d77612b2f36c34e60a527b7d9d8032533ef17a
SHA256

5a810a0b7402b9023f8c5016d0341a5070ef1ce52f0b124b6ced8a3846e54c83
SHA512

352c72dd0274ce4e61804d14e86593cba4847584860f4adc5e57d94939403889bfb97748c36b50b9d7a74ff0960007cc1cd4c480fde7e61ee2b2960963599656
SSDEEP

192:c+8C+EKS0O9ejYTDG8bcp4LltGnieXubWyD9JEBkGxVXkqoN/JoRJc:cNVjYTDG8gpIleXTyD3EnxroNRP

Score

10^/10

revengerat nyancatrevenge discovery

Malware Config

Extracted

Family

revengerat

Botnet

NyanCatRevenge

C2

toloro.duckdns.org:5555

Mutex

04e5a5aa2e514cc6a7

Targets

- Target
  
  5a810a0b7402b9023f8c5016d0341a5070ef1ce52f0b124b6ced8a3846e54c83.exe
- Size
  
  14KB
- MD5
  
  cc801055c454f393abfd2711a6b92674
- SHA1
  
  d5d77612b2f36c34e60a527b7d9d8032533ef17a
- SHA256
  
  5a810a0b7402b9023f8c5016d0341a5070ef1ce52f0b124b6ced8a3846e54c83
- SHA512
  
  352c72dd0274ce4e61804d14e86593cba4847584860f4adc5e57d94939403889bfb97748c36b50b9d7a74ff0960007cc1cd4c480fde7e61ee2b2960963599656
- SSDEEP
  
  192:c+8C+EKS0O9ejYTDG8bcp4LltGnieXubWyD9JEBkGxVXkqoN/JoRJc:cNVjYTDG8gpIleXTyD3EnxroNRP
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

nyancatrevengerevengerat

behavioral1

behavioral2