Analysis
- max time kernel
146s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
- submitted
27/09/2024, 19:18
General
- Target Revenge-RAT v0.3/Revenge-RAT v0.3/Client.exe
- Size 16KB
- Sample240927-x1bmcsvepp
- SHA256 0b3472c651db8cc9991a92097c22dc4cab8467aff96591f76fb89bc3af8eadaa
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Revenge-RAT v0.3\Revenge-RAT v0.3\Client.exe"C:\Users\Admin\AppData\Local\Temp\Revenge-RAT v0.3\Revenge-RAT v0.3\Client.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1916-0-0x00007FFF217B5000-0x00007FFF217B6000-memory.dmp
memory/1916-1-0x00007FFF21500000-0x00007FFF21EA1000-memory.dmp
memory/1916-3-0x000000001C780000-0x000000001C826000-memory.dmp
memory/1916-2-0x000000001C200000-0x000000001C6CE000-memory.dmp
memory/1916-4-0x00007FFF21500000-0x00007FFF21EA1000-memory.dmp
memory/1916-5-0x000000001CF70000-0x000000001CFD2000-memory.dmp
memory/1916-6-0x00007FFF217B5000-0x00007FFF217B6000-memory.dmp
memory/1916-7-0x00007FFF21500000-0x00007FFF21EA1000-memory.dmp