General

  • Target

    243accf84fe12f5240a208450e2a7731754c371e7ec4ba5a029f1f276d7f149b.exe

  • Size

    1.4MB

  • Sample

    241206-dyhhcaxrgw

  • MD5

    a0327a3dfc3fde27d2f30aac93738df4

  • SHA1

    687e6c50b2bd9b363a6ba369ae912093fd64f3ad

  • SHA256

    243accf84fe12f5240a208450e2a7731754c371e7ec4ba5a029f1f276d7f149b

  • SHA512

    009a9ca43a785a29adf84d79997bcd7e5b565e9bc0d49f61ac2ec1603636e18184fc378abcaebfe322c9d49f8b147e3430e8096353ad1c4ee1723e871aab130a

  • SSDEEP

    24576:kq5TfcdHj4fmb9Ve9l2qEK26wQzLMnUAFFIfHWEzKJ9TtrWgXiFurFtW0zQJ9Ttw:kUTsamC9lx6FB5lFI5w

Malware Config

Targets

    • Target

      243accf84fe12f5240a208450e2a7731754c371e7ec4ba5a029f1f276d7f149b.exe

    • Size

      1.4MB

    • MD5

      a0327a3dfc3fde27d2f30aac93738df4

    • SHA1

      687e6c50b2bd9b363a6ba369ae912093fd64f3ad

    • SHA256

      243accf84fe12f5240a208450e2a7731754c371e7ec4ba5a029f1f276d7f149b

    • SHA512

      009a9ca43a785a29adf84d79997bcd7e5b565e9bc0d49f61ac2ec1603636e18184fc378abcaebfe322c9d49f8b147e3430e8096353ad1c4ee1723e871aab130a

    • SSDEEP

      24576:kq5TfcdHj4fmb9Ve9l2qEK26wQzLMnUAFFIfHWEzKJ9TtrWgXiFurFtW0zQJ9Ttw:kUTsamC9lx6FB5lFI5w

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • Revengerat family

    • RevengeRat Executable

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks