Resubmissions

29/06/2026, 01:41

260629-b4ktjsbx5m10

29/06/2026, 01:36

260629-b1daasbw7l8

General

  • Target
    https://github.com/ytisf/theZoo/tree/master/malware
  • Sample260629-b4ktjsbx5m

Malware Config

Extracted

Family
  • revengerat

Botnet
  • Guest

C2
  • 0.tcp.ngrok.io:19521

Mutex
  • RV_MUTEX

Targets

    • Target
      https://github.com/ytisf/theZoo/tree/master/malware
    • Family: RevengeRAT

      Remote-access trojan with a wide range of capabilities.

    • RevengeRat Executable

    • Checks hardware identifiers (DMI)

      Checks DMI information which indicate if the system is a virtual machine.

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Reads hardware information

      Accesses system info like serial numbers, manufacturer names etc.

MITRE ATT&CK Enterprise v16

Tasks