revengerat | de857504d0af2fb85045bc4f68ed7df380e2490186af314ca2a27cd1b7d13a6a | Triage

Submit
Reports

Overview

overview

Static

static

1

de857504d0...6a.exe

windows7-x64

de857504d0...6a.exe

windows10-2004-x64

Sharing

General

Target

de857504d0af2fb85045bc4f68ed7df380e2490186af314ca2a27cd1b7d13a6a.exe
Size

578KB
Sample

250124-gw9qlatnft
MD5

2e1c27be8ad0c7cd5d617f4e65386eb4
SHA1

fb52e06e294053458025c3b4fb5c828c0d69eede
SHA256

de857504d0af2fb85045bc4f68ed7df380e2490186af314ca2a27cd1b7d13a6a
SHA512

35dac0d3a5db35798495c4ff64abe5b7e7b6486db82efe1cfb7898a86e11d2ae6d6f4c800cac2ec5289982f737357e932ab3f77f1ec7d28e2fc3bcd34f3e19f0
SSDEEP

6144:tKld3FcfCElJk125U8SpVUagDsvb6mgmw4sFfTysVufBn597NX2U:tkVcfXlJkE5YVUjuOjysgfBnnl2U

Score

10^/10

revengerat discovery stealer trojan

Static task

static1

Behavioral task

behavioral1

Sample

de857504d0af2fb85045bc4f68ed7df380e2490186af314ca2a27cd1b7d13a6a.exe

Resource

win7-20241010-en

revengerat discovery stealer trojan

windows7-x64

15 signatures

150 seconds

Behavioral task

behavioral2

Sample

de857504d0af2fb85045bc4f68ed7df380e2490186af314ca2a27cd1b7d13a6a.exe

Resource

win10v2004-20241007-en

revengerat discovery stealer trojan

windows10-2004-x64

15 signatures

150 seconds

Malware Config

Targets

- Target
  
  de857504d0af2fb85045bc4f68ed7df380e2490186af314ca2a27cd1b7d13a6a.exe
- Size
  
  578KB
- MD5
  
  2e1c27be8ad0c7cd5d617f4e65386eb4
- SHA1
  
  fb52e06e294053458025c3b4fb5c828c0d69eede
- SHA256
  
  de857504d0af2fb85045bc4f68ed7df380e2490186af314ca2a27cd1b7d13a6a
- SHA512
  
  35dac0d3a5db35798495c4ff64abe5b7e7b6486db82efe1cfb7898a86e11d2ae6d6f4c800cac2ec5289982f737357e932ab3f77f1ec7d28e2fc3bcd34f3e19f0
- SSDEEP
  
  6144:tKld3FcfCElJk125U8SpVUagDsvb6mgmw4sFfTysVufBn597NX2U:tkVcfXlJkE5YVUjuOjysgfBnnl2U
Score

10^/10

revengerat discovery stealer trojan
- RevengeRAT
  Remote-access trojan with a wide range of capabilities.
  trojan revengerat
- Revengerat family
  revengerat
- RevengeRat Executable
  stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

revengeratdiscoverystealertrojan

behavioral2

revengeratdiscoverystealertrojan

© 2018-2025

Terms | Privacy