General

  • Target
    JEA REVENANT ONESHOT.zip
  • Size 319.3MB
  • Sample260813-kh77dsvgpe
  • SHA256 fb6ce8196f32cf8ddde0aa266d98615fb1800e99436263cdac44b16b86c577d4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Revenant Oneshot.exe
    • Size 312.9MB
    • SHA256 8eee799163b6d2463ea778ec8cb5c6a27bd285644d25c0bc792a5d4ebcbcb46e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Credentials from Password Stores: Windows Credential Manager

      Suspicious access to Credentials History.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Target
      lime.ndll
    • Size 8.3MB
    • SHA256 858d59373224cb0e3cc5a96799e8a6da1eb31b510975fcae7bad87aac12543cc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks