Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

1

1dbec87d81...eN.exe

windows7-x64

10

1dbec87d81...eN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1dbec87d810b6cd9423680b2f84433cb10f6640b72cc0171b5cd32a4639d980eN.exe

  • Size

    578KB

  • Sample

    250124-tf7mhswmbz

  • MD5

    859413c0ba0ab45d3d6e92cc75d7cdb0

  • SHA1

    b538014b838377a3e5296287bb7a84dd02799a97

  • SHA256

    1dbec87d810b6cd9423680b2f84433cb10f6640b72cc0171b5cd32a4639d980e

  • SHA512

    964c3ddaae1d7cfd8b92d85dd4b85a2c1d7fd6c2d89435ddc46cdf05d58944591204b08cbf0f993edc809f92443a86692f30f43b2c63f6736d7df1f0e8b9e214

  • SSDEEP

    6144:tKld3FcfCElJk125U8SpVUagDsvb6mgmw4sFfTysVufBn597NX2s:tkVcfXlJkE5YVUjuOjysgfBnnl2s

Score
10/10
revengeratdiscoverystealertrojan

Malware Config

Targets

    • Target

      1dbec87d810b6cd9423680b2f84433cb10f6640b72cc0171b5cd32a4639d980eN.exe

    • Size

      578KB

    • MD5

      859413c0ba0ab45d3d6e92cc75d7cdb0

    • SHA1

      b538014b838377a3e5296287bb7a84dd02799a97

    • SHA256

      1dbec87d810b6cd9423680b2f84433cb10f6640b72cc0171b5cd32a4639d980e

    • SHA512

      964c3ddaae1d7cfd8b92d85dd4b85a2c1d7fd6c2d89435ddc46cdf05d58944591204b08cbf0f993edc809f92443a86692f30f43b2c63f6736d7df1f0e8b9e214

    • SSDEEP

      6144:tKld3FcfCElJk125U8SpVUagDsvb6mgmw4sFfTysVufBn597NX2s:tkVcfXlJkE5YVUjuOjysgfBnnl2s

    Score
    10/10
    revengeratdiscoverystealertrojan

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • Revengerat family

      revengerat

    • RevengeRat Executable

      stealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks