General

  • Target

    JaffaCakes118_7be5ddc2eade9ceb8ef531ff9b5f0f80

  • Size

    600KB

  • Sample

    250104-1lr8caynby

  • MD5

    7be5ddc2eade9ceb8ef531ff9b5f0f80

  • SHA1

    adf5bdd7b3481a11f0dc834814ce22bd0e0b7c74

  • SHA256

    73e8f590f0e2a0edf011e4b985a5bae11b11b839a99b85ecea79db6547edf1c2

  • SHA512

    38b4f5a0ee37ab640bb9c5e55dbc593f967b0948e0b2946b2ee7b85e49d4177df6116544635553719f898023fdff12f93602bf3a9140149a076e244bd7f21d60

  • SSDEEP

    6144:oKWlw1Dx+NASQFfCEv2YUMNJlaJuNlK17Y4c83fhysVufBn597NX2zx:o7lw1DxS5QFfXeYU43fiysgfBnnl2zx

Malware Config

Targets

    • Target

      JaffaCakes118_7be5ddc2eade9ceb8ef531ff9b5f0f80

    • Size

      600KB

    • MD5

      7be5ddc2eade9ceb8ef531ff9b5f0f80

    • SHA1

      adf5bdd7b3481a11f0dc834814ce22bd0e0b7c74

    • SHA256

      73e8f590f0e2a0edf011e4b985a5bae11b11b839a99b85ecea79db6547edf1c2

    • SHA512

      38b4f5a0ee37ab640bb9c5e55dbc593f967b0948e0b2946b2ee7b85e49d4177df6116544635553719f898023fdff12f93602bf3a9140149a076e244bd7f21d60

    • SSDEEP

      6144:oKWlw1Dx+NASQFfCEv2YUMNJlaJuNlK17Y4c83fhysVufBn597NX2zx:o7lw1DxS5QFfXeYU43fiysgfBnnl2zx

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • Revengerat family

    • RevengeRat Executable

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks