Overview

overview

10

Static

static

10

JaffaCakes...74.exe

windows7-x64

10

JaffaCakes...74.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_57c90614896ad66362ef89758a69cb74

  • Size

    558KB

  • Sample

    250107-j8nd8ssmey

  • MD5

    57c90614896ad66362ef89758a69cb74

  • SHA1

    589c99e63d6e2493b39a5154df74298bf8d9181b

  • SHA256

    7476563d5dd9a2e6e3fd20dea60c7d94bc45915af8238a1272d1c91955022943

  • SHA512

    d78e3925c5100f7d28d6d681119ed6e43324e36f79ca495f7f5f5d50367afc18e53c51dbe50a15e0a0191094045a9387969f80cc8488c7334005640e048b52fb

  • SSDEEP

    12288:6h7nbLXaRfbWGBJ/tayfH2x9j+pTmX5WE6f1YKEJRz:6h7n/XOWGLVfvO9sTmp8f1UJ

Score
10/10
revengeratdiscoverypersistencestealertrojan

Malware Config

Targets

    • Target

      JaffaCakes118_57c90614896ad66362ef89758a69cb74

    • Size

      558KB

    • MD5

      57c90614896ad66362ef89758a69cb74

    • SHA1

      589c99e63d6e2493b39a5154df74298bf8d9181b

    • SHA256

      7476563d5dd9a2e6e3fd20dea60c7d94bc45915af8238a1272d1c91955022943

    • SHA512

      d78e3925c5100f7d28d6d681119ed6e43324e36f79ca495f7f5f5d50367afc18e53c51dbe50a15e0a0191094045a9387969f80cc8488c7334005640e048b52fb

    • SSDEEP

      12288:6h7nbLXaRfbWGBJ/tayfH2x9j+pTmX5WE6f1YKEJRz:6h7n/XOWGLVfvO9sTmp8f1UJ

    Score
    10/10
    revengeratdiscoverypersistencestealertrojan

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • Revengerat family

      revengerat

    • RevengeRat Executable

      stealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks