revengerat | a7d2f55885f055dededcc8000d4e6871fb7d6107c92714f7368b5fdbd421ccd1 | Triage

Sharing

General

Target

JaffaCakes118_7d88f94bbcfd7173415196313f5e591d
Size

877KB
Sample

250317-kjjv7aylw9
MD5

7d88f94bbcfd7173415196313f5e591d
SHA1

38e7fe7f053c53a1f75c8cd8ec0be12d670e7e55
SHA256

a7d2f55885f055dededcc8000d4e6871fb7d6107c92714f7368b5fdbd421ccd1
SHA512

5ec038e41685e8b3c2c651a8f773ab872fd1ff7c9417120778f2e907d12760ee2267dc2c9b3d9051bedfb1b1bd42276ff023d5d193059603fc334a3257c31704
SSDEEP

6144:lKRlfdLQsZ8KRlfdhKRlfdLQsZ8KRlfdhKRlfdLQsZ8KRlfdA6vW4Vs7elul2NG1:M1Le1Le1LXO4VszohVun

Score

10^/10

revengerat stealer

Malware Config

Targets

- Target
  
  JaffaCakes118_7d88f94bbcfd7173415196313f5e591d
- Size
  
  877KB
- MD5
  
  7d88f94bbcfd7173415196313f5e591d
- SHA1
  
  38e7fe7f053c53a1f75c8cd8ec0be12d670e7e55
- SHA256
  
  a7d2f55885f055dededcc8000d4e6871fb7d6107c92714f7368b5fdbd421ccd1
- SHA512
  
  5ec038e41685e8b3c2c651a8f773ab872fd1ff7c9417120778f2e907d12760ee2267dc2c9b3d9051bedfb1b1bd42276ff023d5d193059603fc334a3257c31704
- SSDEEP
  
  6144:lKRlfdLQsZ8KRlfdhKRlfdLQsZ8KRlfdhKRlfdLQsZ8KRlfdA6vW4Vs7elul2NG1:M1Le1Le1LXO4VszohVun
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

stealerrevengerat

behavioral1

behavioral2