Overview

overview

10

Static

static

3

4f423fbb6d...18.exe

windows7-x64

10

4f423fbb6d...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4f423fbb6d7c31fd3cac2c3729e39762_JaffaCakes118

  • Size

    69KB

  • Sample

    241016-1wyg4syejq

  • MD5

    4f423fbb6d7c31fd3cac2c3729e39762

  • SHA1

    547daf4dc1fec5c0f81b6f63987f945b68e1f40a

  • SHA256

    c5501222fa725c82f0e978d2bfdc1b8435dd7784b21e532531ec2e107077aa5c

  • SHA512

    0158a6a56840bedceafa05e59b69888cc6be21d29b64d2c54ede1b39b7a11e2a9ecf0ce4221801758baed98bff8e21b3487722334ecf31fbd5efc9fff5aa54a9

  • SSDEEP

    1536:3OtU5/9U/H52Bw+RqX82e7thSxUzKU4dHy7JH14qwqMWchkx:eta/uou+Re5cnKU4dkt6WchI

Score
10/10
revengeratdiscoverystealertrojan

Malware Config

Targets

    • Target

      4f423fbb6d7c31fd3cac2c3729e39762_JaffaCakes118

    • Size

      69KB

    • MD5

      4f423fbb6d7c31fd3cac2c3729e39762

    • SHA1

      547daf4dc1fec5c0f81b6f63987f945b68e1f40a

    • SHA256

      c5501222fa725c82f0e978d2bfdc1b8435dd7784b21e532531ec2e107077aa5c

    • SHA512

      0158a6a56840bedceafa05e59b69888cc6be21d29b64d2c54ede1b39b7a11e2a9ecf0ce4221801758baed98bff8e21b3487722334ecf31fbd5efc9fff5aa54a9

    • SSDEEP

      1536:3OtU5/9U/H52Bw+RqX82e7thSxUzKU4dHy7JH14qwqMWchkx:eta/uou+Re5cnKU4dkt6WchI

    Score
    10/10
    revengeratdiscoverystealertrojan

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • RevengeRat Executable

      stealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks