General

  • Target

    JaffaCakes118_43983f52deaefe1ad90e41142c646320

  • Size

    600KB

  • Sample

    250101-cqabbstjbj

  • MD5

    43983f52deaefe1ad90e41142c646320

  • SHA1

    fb534dd7bb3ce23aa145f8bbbc1cd0bd5a55e39c

  • SHA256

    21b728321502d6e91aa763a31289f730dcc168b1e04b7ce31979e01ff330ed19

  • SHA512

    1d468b4ca2a76e38b3975b30db15783da20b7d82afbf43cd01af7dee4578256accb714b9352485baf31a711a41820b4e9ec85ee1c14d4576aff6a6006cc25278

  • SSDEEP

    12288:V7lw1DxUp2fX9IiyO9KWz3d7ysgfBnnl241:V7m1DJ3yO9KWz3lysgpnncg

Malware Config

Targets

    • Target

      JaffaCakes118_43983f52deaefe1ad90e41142c646320

    • Size

      600KB

    • MD5

      43983f52deaefe1ad90e41142c646320

    • SHA1

      fb534dd7bb3ce23aa145f8bbbc1cd0bd5a55e39c

    • SHA256

      21b728321502d6e91aa763a31289f730dcc168b1e04b7ce31979e01ff330ed19

    • SHA512

      1d468b4ca2a76e38b3975b30db15783da20b7d82afbf43cd01af7dee4578256accb714b9352485baf31a711a41820b4e9ec85ee1c14d4576aff6a6006cc25278

    • SSDEEP

      12288:V7lw1DxUp2fX9IiyO9KWz3d7ysgfBnnl241:V7m1DJ3yO9KWz3lysgpnncg

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • Revengerat family

    • RevengeRat Executable

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks