revengerat | 735a8c7468aee445a55b1b882e8efba7abf7cc49113e510aba055b5e6455931f | Triage

Sharing

General

Target

fe6117df62a36d0d88f0d2f2f7307032_JaffaCakes118
Size

18KB
Sample

240929-m1y3jsvbqe
MD5

fe6117df62a36d0d88f0d2f2f7307032
SHA1

0dd8b35d89ba3b9c1f7dd8435888d7594d37e657
SHA256

735a8c7468aee445a55b1b882e8efba7abf7cc49113e510aba055b5e6455931f
SHA512

d1f1dd2cf7b601e45111ab494d772957d94007fe31e9b7e25478aa9f64fa4842d23950ff73190866d1c56c5baca68e09128f09891f392a3540df4dd80ae63ace
SSDEEP

384:4eLxa+hi/juX+F3Du6bTsVKfDyB7q9kr:4+xaukdDp7k+u

Score

10^/10

revengerat my-special_hack stealer

Malware Config

Extracted

Family

revengerat

Botnet

MY-SPECIAL_HACK

C2

mralaa1.myq-see.com:9292

Mutex

RV_MUTEX-XwVrReSbcnjChnF

Targets

- Target
  
  fe6117df62a36d0d88f0d2f2f7307032_JaffaCakes118
- Size
  
  18KB
- MD5
  
  fe6117df62a36d0d88f0d2f2f7307032
- SHA1
  
  0dd8b35d89ba3b9c1f7dd8435888d7594d37e657
- SHA256
  
  735a8c7468aee445a55b1b882e8efba7abf7cc49113e510aba055b5e6455931f
- SHA512
  
  d1f1dd2cf7b601e45111ab494d772957d94007fe31e9b7e25478aa9f64fa4842d23950ff73190866d1c56c5baca68e09128f09891f392a3540df4dd80ae63ace
- SSDEEP
  
  384:4eLxa+hi/juX+F3Du6bTsVKfDyB7q9kr:4+xaukdDp7k+u
Score

1^/10
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Scheduled Task/Job

Scheduled Task

Defense Evasion

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

stealermy-special_hackrevengerat

behavioral1

behavioral2