revengerat | 5b0441fbb03237c5c83f302dc8e58e451b5e6ff9476ffb57102069161d391a8e | Triage

Sharing

General

Target

1730208185981162f0ff5b68b4d0ac7ca5d90fc05eb58d07e41b2c2b83b4b4bff49be540b5107.dat-decod
Size

14KB
Sample

241029-qnsa1swblp
MD5

4e2eefba72e74b912f088109cb11c75d
SHA1

9fb908ff7d3009677e43f890f93ae2d10e75bc04
SHA256

5b0441fbb03237c5c83f302dc8e58e451b5e6ff9476ffb57102069161d391a8e
SHA512

0330d57f775492a23e3298f0c2cdb97d2f5dc1b4877f194fa47bdc69c8d0df8a02016af3377b88616cb0f7017ed0cd57b70dcfc7698cf913e48344d7f618f3df
SSDEEP

192:Y+8C+EKS0O9ejYTDG8bcp4LlnGnieXubWyD9JEBkGxVX4qoNxRJc:YNVjYTDG8gp2leXTyD3EnxHoNW

Score

10^/10

revengerat nyancatrevenge discovery

Malware Config

Extracted

Family

revengerat

Botnet

NyanCatRevenge

C2

marcelotatuape.ddns.net:333

Mutex

4e38e6edb97644

Targets

- Target
  
  1730208185981162f0ff5b68b4d0ac7ca5d90fc05eb58d07e41b2c2b83b4b4bff49be540b5107.dat-decod
- Size
  
  14KB
- MD5
  
  4e2eefba72e74b912f088109cb11c75d
- SHA1
  
  9fb908ff7d3009677e43f890f93ae2d10e75bc04
- SHA256
  
  5b0441fbb03237c5c83f302dc8e58e451b5e6ff9476ffb57102069161d391a8e
- SHA512
  
  0330d57f775492a23e3298f0c2cdb97d2f5dc1b4877f194fa47bdc69c8d0df8a02016af3377b88616cb0f7017ed0cd57b70dcfc7698cf913e48344d7f618f3df
- SSDEEP
  
  192:Y+8C+EKS0O9ejYTDG8bcp4LlnGnieXubWyD9JEBkGxVX4qoNxRJc:YNVjYTDG8gp2leXTyD3EnxHoNW
Score

7^/10

discovery
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

nyancatrevengerevengerat

behavioral1

behavioral2