General

  • Target
    2026-03-13_3d3977ca15a766d33e35114dae53300a_agent-tesla_amadey_darkgate_elex_hawkeye_icedid_maze_njrat_remcos
  • Size 1023KB
  • Sample260313-2j8b8acv4w
  • SHA256 b60b977a8da0dc21298a08dd2e2caba18196d08e2bea594654b17b399af79646
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • revengerat

Botnet
  • Marzo26

C2
  • marzorevenger.duckdns.org:4230

Mutex
  • RV_MUTEX-PiGGjjtnxDpn

Targets

    • Target
      2026-03-13_3d3977ca15a766d33e35114dae53300a_agent-tesla_amadey_darkgate_elex_hawkeye_icedid_maze_njrat_remcos
    • Size 1023KB
    • SHA256 b60b977a8da0dc21298a08dd2e2caba18196d08e2bea594654b17b399af79646
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • Revengerat family

    • Drops startup file

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks