General

  • Target

    31b10f1a4a6bb1e74af48d786c3c5957d1fdde4307adb24d5cbf06f278fc18ae.exe

  • Size

    17KB

  • Sample

    240927-ynk6pswhjp

  • MD5

    7ce0ae6f480ddfcdb6791b4c657c0457

  • SHA1

    8bd1d4205dc4b4c057f73f47333f33ef9866cd7f

  • SHA256

    31b10f1a4a6bb1e74af48d786c3c5957d1fdde4307adb24d5cbf06f278fc18ae

  • SHA512

    8378d7a092dfe57c10e3132cf4d53a8fad7d53344d84a52d88863af67a19a19a2bd507211b2727b9f5854b9d8245a793d673f953b5bfb382db278e61df128cf4

  • SSDEEP

    384:crRPot9VcjGYbalEM7s/oObysVK8sy0XfWc:crRPG9galEoGCbXu

Malware Config

Extracted

Family

revengerat

Botnet

Guest

C2

memo445.ddns.net:1337

Mutex

RV_MUTEX

Targets

    • Target

      31b10f1a4a6bb1e74af48d786c3c5957d1fdde4307adb24d5cbf06f278fc18ae.exe

    • Size

      17KB

    • MD5

      7ce0ae6f480ddfcdb6791b4c657c0457

    • SHA1

      8bd1d4205dc4b4c057f73f47333f33ef9866cd7f

    • SHA256

      31b10f1a4a6bb1e74af48d786c3c5957d1fdde4307adb24d5cbf06f278fc18ae

    • SHA512

      8378d7a092dfe57c10e3132cf4d53a8fad7d53344d84a52d88863af67a19a19a2bd507211b2727b9f5854b9d8245a793d673f953b5bfb382db278e61df128cf4

    • SSDEEP

      384:crRPot9VcjGYbalEM7s/oObysVK8sy0XfWc:crRPG9galEoGCbXu

    Score
    7/10
    • Drops startup file

    • Uses the VBS compiler for execution

MITRE ATT&CK Enterprise v15

Tasks