General

  • Target

    CC Generator.zip

  • Size

    4.9MB

  • Sample

    250108-xhr7dsyncv

  • MD5

    68ed86581a318c9e7278b3822b7fbeff

  • SHA1

    df8d5d2f399e276a4c1c19aece2f7a7af3cb0d99

  • SHA256

    f2e1f9ba48a8304bf36725aba51e6b3f461e5899e06ba626fdc8a73652fe9d5e

  • SHA512

    a96d697280cf1b4f74734add0da6b250d147da9692dae991e531e7d3bd96ea2ca75a4f29c8098aa728bc32a1255cd81943c9307ced744cb53dc15633df5c95b4

  • SSDEEP

    98304:nwByXeiHcyxoMNkU4Zg0F2XdintFiyvf8YmIf5z7wJuKriVDrNUMxv:wBDocko8N0F2tMFiyvf8Ym85z7wvriBF

Malware Config

Extracted

Family

revengerat

Botnet

NyanCatRevenge

C2

amazon.capeturk.com:100

Mutex

eea5a83186824927836

Targets

    • Target

      CC Generator.zip

    • Size

      4.9MB

    • MD5

      68ed86581a318c9e7278b3822b7fbeff

    • SHA1

      df8d5d2f399e276a4c1c19aece2f7a7af3cb0d99

    • SHA256

      f2e1f9ba48a8304bf36725aba51e6b3f461e5899e06ba626fdc8a73652fe9d5e

    • SHA512

      a96d697280cf1b4f74734add0da6b250d147da9692dae991e531e7d3bd96ea2ca75a4f29c8098aa728bc32a1255cd81943c9307ced744cb53dc15633df5c95b4

    • SSDEEP

      98304:nwByXeiHcyxoMNkU4Zg0F2XdintFiyvf8YmIf5z7wJuKriVDrNUMxv:wBDocko8N0F2tMFiyvf8Ym85z7wvriBF

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • Revengerat family

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks