revengerat

General

Target
2026-03-13_ca49be0379261ed785fe3b48a3c52c74_agent-tesla_amadey_darkgate_elex_glassworm_hawkeye_icedid_maze_njrat_remcos
Size 3.5MB
Sample260313-psgjmsbw8p
SHA256 6b9674c403f10fcb5bd34e22a14b0e67024453605de7ed44411bf7b992a9bf40
MD5 ca49be0379261ed785fe3b48a3c52c74
SHA1 8567497fdcc4c4a0de17d72f8b7704d39068cc51
SHA512 e8c1c11eabc8f4675eaeddbcf7a1c5248df3a2eebcc5c89fe71dd92201ac9f5166e1b30356ab7988c9105f96f6834f6100efa7a03b1a99bb9e931bd82bc197b4
SSDEEP 49152:uh+ZkldoPK8YaKjKVmgbQIzZMPXpB91rHpn/qKmNAOaG6IOY/B+qtCo:n2cPK82nLrHp/qKm2/Sb/gqAo
TLSH
T14F069C13EB8185E8FA9E45335B185100D63EFA21961F5329356C260DDFA33938F69E3E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

revengerat

Botnet

Marzo26

C2

marzorevenger.duckdns.org:4230

Mutex

RV_MUTEX-PiGGjjtnxDpn

Targets

- Target
  2026-03-13_ca49be0379261ed785fe3b48a3c52c74_agent-tesla_amadey_darkgate_elex_glassworm_hawkeye_icedid_maze_njrat_remcos
- Size 3.5MB
- SHA256 6b9674c403f10fcb5bd34e22a14b0e67024453605de7ed44411bf7b992a9bf40
- MD5 ca49be0379261ed785fe3b48a3c52c74
- SHA1 8567497fdcc4c4a0de17d72f8b7704d39068cc51
- SHA512 e8c1c11eabc8f4675eaeddbcf7a1c5248df3a2eebcc5c89fe71dd92201ac9f5166e1b30356ab7988c9105f96f6834f6100efa7a03b1a99bb9e931bd82bc197b4
- SSDEEP 49152:uh+ZkldoPK8YaKjKVmgbQIzZMPXpB91rHpn/qKmNAOaG6IOY/B+qtCo:n2cPK82nLrHp/qKm2/Sb/gqAo
- TLSH
  T14F069C13EB8185E8FA9E45335B185100D63EFA21961F5329356C260DDFA33938F69E3E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

marzo26 discovery revengerat trojan
- RevengeRAT
  Remote-access trojan with a wide range of capabilities.
  trojan revengerat
- Revengerat family
  revengerat
- Drops startup file
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Revengerat family

Drops startup file

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2