General

  • Target

    JaffaCakes118_630b6174d80e21dff1d7e2c801b05650

  • Size

    602KB

  • Sample

    250102-gk1csayqbq

  • MD5

    630b6174d80e21dff1d7e2c801b05650

  • SHA1

    cd700fa1e81486b82623b2cbb14c53bbdd7fe79b

  • SHA256

    6362ba2e4d039d0b00f3768c2206e6a1f62880362a7da9738c2c64ca57440850

  • SHA512

    3d7e913d2fe8d699cca4c90250b95ed844517f3cbba2846ec49fd7e4f170984fa1d272762c70acc5eacd9b7205a869608047ab98e32690f6e7843ae2667d43c0

  • SSDEEP

    12288:d7lw1Dx2plwfX9F59l3N8aF7ysgfBnnl2n:d7m1DSuFDl3maF7ysgpnncn

Malware Config

Targets

    • Target

      JaffaCakes118_630b6174d80e21dff1d7e2c801b05650

    • Size

      602KB

    • MD5

      630b6174d80e21dff1d7e2c801b05650

    • SHA1

      cd700fa1e81486b82623b2cbb14c53bbdd7fe79b

    • SHA256

      6362ba2e4d039d0b00f3768c2206e6a1f62880362a7da9738c2c64ca57440850

    • SHA512

      3d7e913d2fe8d699cca4c90250b95ed844517f3cbba2846ec49fd7e4f170984fa1d272762c70acc5eacd9b7205a869608047ab98e32690f6e7843ae2667d43c0

    • SSDEEP

      12288:d7lw1Dx2plwfX9F59l3N8aF7ysgfBnnl2n:d7m1DSuFDl3maF7ysgpnncn

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • Revengerat family

    • RevengeRat Executable

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks