revengerat

General

Target

1371138743183eb6011c7e5c9a406220b3f1b106f0883fc9ddb7bcf2a8bd73c1.exe
Size

1.1MB
Sample

250124-wl692sskfr
MD5

0a9ed6e28c9467cc163965787237309e
SHA1

17b14a90216e01de78ed0084f3b1890aa6c8730e
SHA256

1371138743183eb6011c7e5c9a406220b3f1b106f0883fc9ddb7bcf2a8bd73c1
SHA512

6e44c614264165f504d68298ac8f7a894a2b61462b27e1a8c4d83d406d45ef55713e41f04e6a8953e4e3dc990c7fde8df44ff969be94ad99acdd051a762c70dc
SSDEEP

24576:tq5TfcdHj4fmb12qg0MmV0VMXLG3on1Gx1s4oo5osSx7:tUTsamhxMo1no5oR

Score

10^/10

Malware Config

Targets

- Target
  
  1371138743183eb6011c7e5c9a406220b3f1b106f0883fc9ddb7bcf2a8bd73c1.exe
- Size
  
  1.1MB
- MD5
  
  0a9ed6e28c9467cc163965787237309e
- SHA1
  
  17b14a90216e01de78ed0084f3b1890aa6c8730e
- SHA256
  
  1371138743183eb6011c7e5c9a406220b3f1b106f0883fc9ddb7bcf2a8bd73c1
- SHA512
  
  6e44c614264165f504d68298ac8f7a894a2b61462b27e1a8c4d83d406d45ef55713e41f04e6a8953e4e3dc990c7fde8df44ff969be94ad99acdd051a762c70dc
- SSDEEP
  
  24576:tq5TfcdHj4fmb12qg0MmV0VMXLG3on1Gx1s4oo5osSx7:tUTsamhxMo1no5oR
Score

10^/10

revengerat discovery stealer trojan upx
- RevengeRAT
  Remote-access trojan with a wide range of capabilities.
  trojan revengerat
- Revengerat family
  revengerat
- RevengeRat Executable
  stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Revengerat family

RevengeRat Executable

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

AutoIT Executable

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2