Analysis
-
max time kernel
1795s -
max time network
1177s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
29-06-2024 19:45
General
-
Target
Revenge-RAT v0.3/Revenge-RAT v0.3/Client.exe
-
Size
16KB
-
MD5
010aabdc4dc52b82d3c6945aaefd22ec
-
SHA1
8f50c8e53c7da15308b57b399c22ab7b97333f5a
-
SHA256
0b3472c651db8cc9991a92097c22dc4cab8467aff96591f76fb89bc3af8eadaa
-
SHA512
609b0a617e4d6a168497b6aa8173b43690f57aefcf48eb3ce06540e7b9cde10b9e741c5d7b9eef936ab3d7857d155189902d0ab7b89784f0b61b74c10196bc0d
-
SSDEEP
384:X/5gk7lVzF3smf9oDPlMNcLlb5sVKhyLF5Ct:X/5gk7lVZjclMNEio
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Revenge-RAT v0.3\Revenge-RAT v0.3\Client.exe"C:\Users\Admin\AppData\Local\Temp\Revenge-RAT v0.3\Revenge-RAT v0.3\Client.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1044-0-0x00007FFB962D5000-0x00007FFB962D6000-memory.dmpFilesize
4KB
-
memory/1044-1-0x00007FFB96020000-0x00007FFB969C1000-memory.dmpFilesize
9.6MB
-
memory/1044-2-0x000000001B720000-0x000000001BBEE000-memory.dmpFilesize
4.8MB
-
memory/1044-3-0x000000001BCA0000-0x000000001BD46000-memory.dmpFilesize
664KB
-
memory/1044-4-0x00007FFB96020000-0x00007FFB969C1000-memory.dmpFilesize
9.6MB
-
memory/1044-5-0x000000001C3F0000-0x000000001C452000-memory.dmpFilesize
392KB
-
memory/1044-6-0x00007FFB96020000-0x00007FFB969C1000-memory.dmpFilesize
9.6MB
-
memory/1044-7-0x00007FFB962D5000-0x00007FFB962D6000-memory.dmpFilesize
4KB
-
memory/1044-8-0x00007FFB96020000-0x00007FFB969C1000-memory.dmpFilesize
9.6MB