General

  • Target

    Links Grabber By Mf4Tn [zone-h] v3.rar

  • Size

    411KB

  • Sample

    250120-akqp1sslc1

  • MD5

    09b7f2392816377e89baa662c1bb532e

  • SHA1

    4d2d891260a43224064346f17cd8ac4621f9ce02

  • SHA256

    e7950daac34b2fec77f776dcf8fea064761cfcba83759477ee27047b82d3bc17

  • SHA512

    3a56e41a02948e34bf9c1fb58bd0960381ef0d95fc08fc6e51c9a7accdf74990a4aceacf88d29a55ba97ceb2d009b7d9cbf6cf8dff960a6cb1048322c1573f9f

  • SSDEEP

    12288:X3enDmhcng8yxnVzkUgSDxF/p05pVcBGxmAxF:XOnPAnHgCFWp1MA7

Malware Config

Extracted

Family

revengerat

Botnet

NYAN-CAT

C2

blog.capeturk.com:1111

Mutex

RV_MUTEX-FZMONFueOciq

Targets

    • Target

      Links Grabber By Mf4Tn [zone-h] v3.rar

    • Size

      411KB

    • MD5

      09b7f2392816377e89baa662c1bb532e

    • SHA1

      4d2d891260a43224064346f17cd8ac4621f9ce02

    • SHA256

      e7950daac34b2fec77f776dcf8fea064761cfcba83759477ee27047b82d3bc17

    • SHA512

      3a56e41a02948e34bf9c1fb58bd0960381ef0d95fc08fc6e51c9a7accdf74990a4aceacf88d29a55ba97ceb2d009b7d9cbf6cf8dff960a6cb1048322c1573f9f

    • SSDEEP

      12288:X3enDmhcng8yxnVzkUgSDxF/p05pVcBGxmAxF:XOnPAnHgCFWp1MA7

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • Revengerat family

    • RevengeRat Executable

    • Executes dropped EXE

    • Adds Run key to start application

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks