General

  • Target

    JaffaCakes118_68812e8c029409b9df9e1e3837022760

  • Size

    600KB

  • Sample

    250102-11xflsxmhy

  • MD5

    68812e8c029409b9df9e1e3837022760

  • SHA1

    0e672a0b2839b59780eb3a060c0bac1df20c47b1

  • SHA256

    213088eeac98c26b9db5a05d7e52bcaa039254f683f46f85c396ab010bfbbfe7

  • SHA512

    6943532dbfa0d8363323a3641f74a257d8da15cc00ee1aafe40a5f938a2468380a7c49b18a48fc758fec29e7db8178c5422b9774a0e9778c29fc77904e05efdf

  • SSDEEP

    6144:TKWlw1Dx+9ASQFfCEv2YUMNJlaJuNlK17Y4c83fhysVufBn597NX2aF:T7lw1Dxq5QFfXeYU43fiysgfBnnl2aF

Malware Config

Targets

    • Target

      JaffaCakes118_68812e8c029409b9df9e1e3837022760

    • Size

      600KB

    • MD5

      68812e8c029409b9df9e1e3837022760

    • SHA1

      0e672a0b2839b59780eb3a060c0bac1df20c47b1

    • SHA256

      213088eeac98c26b9db5a05d7e52bcaa039254f683f46f85c396ab010bfbbfe7

    • SHA512

      6943532dbfa0d8363323a3641f74a257d8da15cc00ee1aafe40a5f938a2468380a7c49b18a48fc758fec29e7db8178c5422b9774a0e9778c29fc77904e05efdf

    • SSDEEP

      6144:TKWlw1Dx+9ASQFfCEv2YUMNJlaJuNlK17Y4c83fhysVufBn597NX2aF:T7lw1Dxq5QFfXeYU43fiysgfBnnl2aF

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • Revengerat family

    • RevengeRat Executable

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks