General

  • Target

    JaffaCakes118_62c6ba9535cf5dfc5b894a20f49e4670

  • Size

    600KB

  • Sample

    250102-fjkp9swrej

  • MD5

    62c6ba9535cf5dfc5b894a20f49e4670

  • SHA1

    ba542016ea2702116a8a882fc65a22391150aca9

  • SHA256

    64973d4e4f31914f027b731cfba25ed690827104774f9c768770290738293a2e

  • SHA512

    2991646db1a499e2e82d80bdfbc9f324c5333ca481c6da0a0a64d9b8d00d066e41d182806bb437aeaffc8c07f99ecd1f1007ef4b7fb2da9190bcdff37d13ff1c

  • SSDEEP

    6144:hKWlw1Dx+iASQFfCEv2YUMNJlaJuNlK17Y4c83fhysVufBn597NX27u:h7lw1DxV5QFfXeYU43fiysgfBnnl27u

Malware Config

Targets

    • Target

      JaffaCakes118_62c6ba9535cf5dfc5b894a20f49e4670

    • Size

      600KB

    • MD5

      62c6ba9535cf5dfc5b894a20f49e4670

    • SHA1

      ba542016ea2702116a8a882fc65a22391150aca9

    • SHA256

      64973d4e4f31914f027b731cfba25ed690827104774f9c768770290738293a2e

    • SHA512

      2991646db1a499e2e82d80bdfbc9f324c5333ca481c6da0a0a64d9b8d00d066e41d182806bb437aeaffc8c07f99ecd1f1007ef4b7fb2da9190bcdff37d13ff1c

    • SSDEEP

      6144:hKWlw1Dx+iASQFfCEv2YUMNJlaJuNlK17Y4c83fhysVufBn597NX27u:h7lw1DxV5QFfXeYU43fiysgfBnnl27u

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • Revengerat family

    • RevengeRat Executable

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks