General

  • Target

    JaffaCakes118_68b8b06c43a35ab7713f6955638f5020

  • Size

    596KB

  • Sample

    250102-2ws33asker

  • MD5

    68b8b06c43a35ab7713f6955638f5020

  • SHA1

    3bdec54b2356276776b2ea18b8b0bad27f746de3

  • SHA256

    c07473853a3b9eb984c6aa005eb7bd4c6cfec6985f077ea8739e7ea5b6d0a7c1

  • SHA512

    6d770a116ad80cf913de5149e7726b902689c8205cb5618378558053702020abc0e025e4b8a72e3649f11c0d399a859ebc2eb84bc229bc5ebd44f17cf2e5eb36

  • SSDEEP

    6144:4KWlw1Dx+qASTuqfCEv2YUMNJlaJuNlK17Y4c83fhysVufBn597NX2:47lw1DxN5HfXeYU43fiysgfBnnl2

Malware Config

Targets

    • Target

      JaffaCakes118_68b8b06c43a35ab7713f6955638f5020

    • Size

      596KB

    • MD5

      68b8b06c43a35ab7713f6955638f5020

    • SHA1

      3bdec54b2356276776b2ea18b8b0bad27f746de3

    • SHA256

      c07473853a3b9eb984c6aa005eb7bd4c6cfec6985f077ea8739e7ea5b6d0a7c1

    • SHA512

      6d770a116ad80cf913de5149e7726b902689c8205cb5618378558053702020abc0e025e4b8a72e3649f11c0d399a859ebc2eb84bc229bc5ebd44f17cf2e5eb36

    • SSDEEP

      6144:4KWlw1Dx+qASTuqfCEv2YUMNJlaJuNlK17Y4c83fhysVufBn597NX2:47lw1DxN5HfXeYU43fiysgfBnnl2

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • Revengerat family

    • RevengeRat Executable

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks