revengerat

General

Target
2026-03-11_2e66032a4e210288dd4c7e2d61e35258_agent-tesla_amadey_darkgate_elex_glassworm_hawkeye_icedid_maze_njrat_remcos
Size 3.5MB
Sample260311-tsv49aft4n
SHA256 40ed8483afa4688f03be60eb3cb1cfd610ed04a7d3bad82fe6261dc8e70da210
MD5 2e66032a4e210288dd4c7e2d61e35258
SHA1 af8f0af397b54d1be1ebe2b7c72fb392d37cfb81
SHA512 71a9ac3c2c0eb95e079ae4e3c53df5d3a835a75e2d9c0426f04b6bef7f37bbb9e126f470e248a29e6ce7da224aa0810024c953222c06348b33c2f043fff90a54
SSDEEP 49152:uh+ZkldoPK8YaKjKVmgbQIzZMPXpB91rHpn/qKmNAOaG6IOY/B+qtCb:n2cPK82nLrHp/qKm2/Sb/gqAb
TLSH
T135069C13EB8185E8FA9E45335B185100D63EFA21961F5329356C260DDFA33938F69E3E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

revengerat

Botnet

Marzo26

C2

marzorevenger.duckdns.org:4230

Mutex

RV_MUTEX-PiGGjjtnxDpn

Targets

- Target
  2026-03-11_2e66032a4e210288dd4c7e2d61e35258_agent-tesla_amadey_darkgate_elex_glassworm_hawkeye_icedid_maze_njrat_remcos
- Size 3.5MB
- SHA256 40ed8483afa4688f03be60eb3cb1cfd610ed04a7d3bad82fe6261dc8e70da210
- MD5 2e66032a4e210288dd4c7e2d61e35258
- SHA1 af8f0af397b54d1be1ebe2b7c72fb392d37cfb81
- SHA512 71a9ac3c2c0eb95e079ae4e3c53df5d3a835a75e2d9c0426f04b6bef7f37bbb9e126f470e248a29e6ce7da224aa0810024c953222c06348b33c2f043fff90a54
- SSDEEP 49152:uh+ZkldoPK8YaKjKVmgbQIzZMPXpB91rHpn/qKmNAOaG6IOY/B+qtCb:n2cPK82nLrHp/qKm2/Sb/gqAb
- TLSH
  T135069C13EB8185E8FA9E45335B185100D63EFA21961F5329356C260DDFA33938F69E3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

marzo26 discovery revengerat trojan
- RevengeRAT
  Remote-access trojan with a wide range of capabilities.
  trojan revengerat
- Revengerat family
  revengerat
- Drops startup file
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Revengerat family

Drops startup file

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2