revengerat | a4d2485e3bf5e858e6f157d7c30aa230482d352bca1840bbff573f18e5319b69 | Triage

Submit
Reports

Overview

overview

Static

static

1

a4d2485e3b...69.exe

windows7-x64

a4d2485e3b...69.exe

windows10-2004-x64

Sharing

General

Target

a4d2485e3bf5e858e6f157d7c30aa230482d352bca1840bbff573f18e5319b69.exe
Size

578KB
Sample

250109-fy6ahszmgz
MD5

1b1371ccbe1866e47cf8c1f7bce697a9
SHA1

3cf8b6f3eb5bde86577256c2706dd878d7f312a7
SHA256

a4d2485e3bf5e858e6f157d7c30aa230482d352bca1840bbff573f18e5319b69
SHA512

b61f0b6bcf73aee3d0e9c7d6938a18780f4b7848f513f073f3d3ea16df23f7d9bb72f84d22f1282194e041e858bd4bcdea6194d9cb2ef1a6da37346cad4cafc5
SSDEEP

6144:bKlx3FcfCElJk125U8SpVUagDsvb6mgmw4sFfTysVufBn597NX2P:boVcfXlJkE5YVUjuOjysgfBnnl2P

Score

10^/10

revengerat discovery stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

a4d2485e3bf5e858e6f157d7c30aa230482d352bca1840bbff573f18e5319b69.exe

Resource

win7-20240903-en

revengerat discovery stealer trojan

windows7-x64

15 signatures

120 seconds

Behavioral task

behavioral2

Sample

a4d2485e3bf5e858e6f157d7c30aa230482d352bca1840bbff573f18e5319b69.exe

Resource

win10v2004-20241007-en

revengerat discovery stealer trojan

windows10-2004-x64

15 signatures

120 seconds

Malware Config

Targets

- Target
  
  a4d2485e3bf5e858e6f157d7c30aa230482d352bca1840bbff573f18e5319b69.exe
- Size
  
  578KB
- MD5
  
  1b1371ccbe1866e47cf8c1f7bce697a9
- SHA1
  
  3cf8b6f3eb5bde86577256c2706dd878d7f312a7
- SHA256
  
  a4d2485e3bf5e858e6f157d7c30aa230482d352bca1840bbff573f18e5319b69
- SHA512
  
  b61f0b6bcf73aee3d0e9c7d6938a18780f4b7848f513f073f3d3ea16df23f7d9bb72f84d22f1282194e041e858bd4bcdea6194d9cb2ef1a6da37346cad4cafc5
- SSDEEP
  
  6144:bKlx3FcfCElJk125U8SpVUagDsvb6mgmw4sFfTysVufBn597NX2P:boVcfXlJkE5YVUjuOjysgfBnnl2P
Score

10^/10

revengerat discovery stealer trojan
- RevengeRAT
  Remote-access trojan with a wide range of capabilities.
  trojan revengerat
- Revengerat family
  revengerat
- RevengeRat Executable
  stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

revengeratdiscoverystealertrojan

behavioral2

revengeratdiscoverystealertrojan

© 2018-2025

Terms | Privacy