Overview

overview

10

Static

static

3

b4f7d6c32f...18.exe

windows7-x64

10

b4f7d6c32f...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b4f7d6c32fd88f6f0743eb92dead9508_JaffaCakes118

  • Size

    345KB

  • Sample

    240616-ywwmeazakj

  • MD5

    b4f7d6c32fd88f6f0743eb92dead9508

  • SHA1

    148dc196a6c47cf25e09b626d061c9ea1d5ba531

  • SHA256

    08812395ae9ee8cced9280aa0da4186a06d69e9bc2a1aef970ca383f504a4779

  • SHA512

    119fd596fbfe7e97a5bfdb2d39e681e038adcf31aaeea7c4c884a908dc6736ec36991b55e69a374832553bb41bfae02b35264b54a5ed076bde0db7bfa25f3a42

  • SSDEEP

    6144:braC/8rXRJeWBp/18S8jzk5lwWsh0QfX8TGAM1S38Tx+8liWpztzRRCRq:brGTegj8dc5u0QiJM15TxXim5R2

Score
10/10
revengeratguesttrojan

Malware Config

Extracted

Family

revengerat

Botnet

Guest

C2

185.29.10.15:6984

Mutex

RV_MUTEX-LuSAtYBxGgZH

Targets

    • Target

      b4f7d6c32fd88f6f0743eb92dead9508_JaffaCakes118

    • Size

      345KB

    • MD5

      b4f7d6c32fd88f6f0743eb92dead9508

    • SHA1

      148dc196a6c47cf25e09b626d061c9ea1d5ba531

    • SHA256

      08812395ae9ee8cced9280aa0da4186a06d69e9bc2a1aef970ca383f504a4779

    • SHA512

      119fd596fbfe7e97a5bfdb2d39e681e038adcf31aaeea7c4c884a908dc6736ec36991b55e69a374832553bb41bfae02b35264b54a5ed076bde0db7bfa25f3a42

    • SSDEEP

      6144:braC/8rXRJeWBp/18S8jzk5lwWsh0QfX8TGAM1S38Tx+8liWpztzRRCRq:brGTegj8dc5u0QiJM15TxXim5R2

    Score
    10/10
    revengeratguesttrojan

    • RevengeRAT

      Remote-access trojan with a wide range of capabilities.

      trojanrevengerat

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks