General

  • Target

    JaffaCakes118_6df0ecc5cec9ab536e7ca5c5e0670cd0

  • Size

    604KB

  • Sample

    250103-t1er8swkbr

  • MD5

    6df0ecc5cec9ab536e7ca5c5e0670cd0

  • SHA1

    e936d8ad2a84605dec3274fd3ef16c98f2882a9d

  • SHA256

    1da358ed457821cee339e16bf4ca809d938d7822b53147a46445ec3e336d73dd

  • SHA512

    9cadf4d6f978175f42874ee400254a076677f185fa6b54082280096bcd1ff69d62ef5109122ce4f08135bca36632da97ff1e802056ef0512a53805dff34b64f7

  • SSDEEP

    12288:L7lw1DxCp0YUfX9F59l3N8aF7ysgfBnnl2JK:L7m1DjFDl3maF7ysgpnncU

Malware Config

Targets

    • Target

      JaffaCakes118_6df0ecc5cec9ab536e7ca5c5e0670cd0

    • Size

      604KB

    • MD5

      6df0ecc5cec9ab536e7ca5c5e0670cd0

    • SHA1

      e936d8ad2a84605dec3274fd3ef16c98f2882a9d

    • SHA256

      1da358ed457821cee339e16bf4ca809d938d7822b53147a46445ec3e336d73dd

    • SHA512

      9cadf4d6f978175f42874ee400254a076677f185fa6b54082280096bcd1ff69d62ef5109122ce4f08135bca36632da97ff1e802056ef0512a53805dff34b64f7

    • SSDEEP

      12288:L7lw1DxCp0YUfX9F59l3N8aF7ysgfBnnl2JK:L7m1DjFDl3maF7ysgpnncU

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • Revengerat family

    • RevengeRat Executable

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks