Extracted

• • Target

    JaffaCakes118_8b1eff957cbbabe0de8eadb89c03bd33

  • Size

    220KB

  • MD5

    8b1eff957cbbabe0de8eadb89c03bd33

  • SHA1

    2ec99b5ee61b9c2ef59a140feabcc2e3dd8d10f7

  • SHA256

    179d2a85a10ac57bbbed4ea5cb3b48c407d6f2a701c993d0b8b449f43f140aff

  • SHA512

    ff5289179084d146cd0b99c04942ffe10d8d44daca33244b3b0aecc216e0e3dfa78f9abc52d1c50e357d65afaa35fe7162bbce218587e9dbac855ab5c8d3fc54

  • SSDEEP

    3072:ljshpXXFMFcU+AdU8fhiSQog87VHy3F69PuqnN1f:tsXFtAvcmgqHwF60S

  Score

  10^/10

  revengeratguestdiscoverystealertrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Revengerat family

    revengerat

  • RevengeRat Executable

    stealer

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2