MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8cdf0712f86a0ae78cd5d61fb784a9d5ef40595e2524dfd539268bbbcc5e1360. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



RevengeRAT


Vendor detections: 7


Intelligence 7 IOCs YARA File information Comments

SHA256 hash: 8cdf0712f86a0ae78cd5d61fb784a9d5ef40595e2524dfd539268bbbcc5e1360
SHA3-384 hash: d35a56583fc631782d72393b9167e52e4f6585316aaf2c0c5fbf269a44f62674a1cbdc544d14767075920dc994548e89
SHA1 hash: 463ee3efcd0fddca8893210103f15e5af6c5a121
MD5 hash: 1393e01dbc8ce75e415462648d1c05e5
humanhash: echo-three-oklahoma-solar
File name:jyEfwFFx.exe
Download: download sample
Signature RevengeRAT
File size:24'576 bytes
First seen:2020-09-14 11:02:21 UTC
Last seen:2020-09-14 11:03:23 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash f34d5f2d4577ed6d9ceec516c1f5a744 (48'748 x AgentTesla, 19'652 x Formbook, 12'246 x SnakeKeylogger)
ssdeep 192:/l5+8Pa9S8kjYTDGgbcp4Lll2SAfF9aEOnryD91ABkGxVXOqoN/qRJ0:/l5P/jYTDGggpI23fJWyDbAnxtoN5
Threatray 25 similar samples on MalwareBazaar
TLSH CAB21909B7DD4739C1BD03BC0DB342355375E5A39A62D70F1CD880AA8D52BD55B60BE8
Reporter pmelson
Tags:exe Revenge RevengeRAT

Intelligence


File Origin
# of uploads :
2
# of downloads :
286
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
Malware
Maliciousness:

Behaviour
Sending a UDP request
DNS request
Connection attempt
Result
Threat name:
RevengeRAT
Detection:
malicious
Classification:
troj
Score:
72 / 100
Signature
Antivirus / Scanner detection for submitted sample
Deletes itself after installation
Machine Learning detection for sample
Multi AV Scanner detection for submitted file
Yara detected RevengeRAT
Behaviour
Behavior Graph:
Threat name:
ByteCode-MSIL.Backdoor.RevengeRAT
Status:
Malicious
First seen:
2020-09-14 11:04:06 UTC
AV detection:
28 of 29 (96.55%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

RevengeRAT

Executable exe 8cdf0712f86a0ae78cd5d61fb784a9d5ef40595e2524dfd539268bbbcc5e1360

(this sample)

Comments