revengerat

General

Target

b73c86b9303f6c78d475ebaec73793830527fad02c86a1bb1a275913ce2ab9a5
Size

1.5MB
Sample

241129-c34qpsznaz
MD5

808d18695edde08f938e85d1f8f0a2be
SHA1

3bee3a16eed97122522070b692e2ce980d12cbee
SHA256

b73c86b9303f6c78d475ebaec73793830527fad02c86a1bb1a275913ce2ab9a5
SHA512

070cf7eb0283caed25105bf24cf171162e1f38ab084bce1d4202f16f9c85beaa1cfb024855663c7053bea5979f5d0104419d7a62bad700573b767a8658f06be2
SSDEEP

24576:Lq5TfcdHj4fmbF2qcjzKJ9Ttr+57mUlX8uda8FzQJ9TtFtQ7GRqwNudePB:LUTsamRxP5Nuds58guda

Score

10^/10

Malware Config

Targets

- Target
  
  b73c86b9303f6c78d475ebaec73793830527fad02c86a1bb1a275913ce2ab9a5
- Size
  
  1.5MB
- MD5
  
  808d18695edde08f938e85d1f8f0a2be
- SHA1
  
  3bee3a16eed97122522070b692e2ce980d12cbee
- SHA256
  
  b73c86b9303f6c78d475ebaec73793830527fad02c86a1bb1a275913ce2ab9a5
- SHA512
  
  070cf7eb0283caed25105bf24cf171162e1f38ab084bce1d4202f16f9c85beaa1cfb024855663c7053bea5979f5d0104419d7a62bad700573b767a8658f06be2
- SSDEEP
  
  24576:Lq5TfcdHj4fmbF2qcjzKJ9Ttr+57mUlX8uda8FzQJ9TtFtQ7GRqwNudePB:LUTsamRxP5Nuds58guda
Score

10^/10

revengerat discovery stealer trojan upx
- RevengeRAT
  Remote-access trojan with a wide range of capabilities.
  trojan revengerat
- Revengerat family
  revengerat
- RevengeRat Executable
  stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Revengerat family

RevengeRat Executable

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

AutoIT Executable

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2