MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c04ec7f7397f2fccbf7fd967a5aa4aeca57c17dc1dac557bbe405ca8423c35ee. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



RevengeRAT


Vendor detections: 7


Intelligence 7 IOCs YARA File information Comments

SHA256 hash: c04ec7f7397f2fccbf7fd967a5aa4aeca57c17dc1dac557bbe405ca8423c35ee
SHA3-384 hash: 95750863bc55ee931f222caab00225dc2b4d633e723701669b5eeb867e81c648930d067261f08edaf54d8b0eb3e6bae2
SHA1 hash: f7b34e5635541e34a312cacb20b077de3d772e11
MD5 hash: 1ad30fc9cf453f899e1cfd63266cd999
humanhash: bulldog-sweet-mississippi-pip
File name:cKKR4e0D.exe
Download: download sample
Signature RevengeRAT
File size:24'576 bytes
First seen:2020-09-12 20:17:20 UTC
Last seen:2020-09-12 20:32:20 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash f34d5f2d4577ed6d9ceec516c1f5a744 (48'748 x AgentTesla, 19'652 x Formbook, 12'246 x SnakeKeylogger)
ssdeep 192:zT+8Pa9S8kjYTDGgbcp4Ll9aSAfF9aEOnryD91ABkGxVXTqoN/6RJw:zTP/jYTDGggpYa3fJWyDbAnxooNF
Threatray 24 similar samples on MalwareBazaar
TLSH 70B21809B7ED4739C1BD07BC0DB242356375E5A39A62C70F1CE880AA8D52BD55B60BE8
Reporter pmelson
Tags:exe Revenge RevengeRAT

Intelligence


File Origin
# of uploads :
2
# of downloads :
320
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
Malware
Maliciousness:

Behaviour
Sending a UDP request
DNS request
Connection attempt
Result
Threat name:
RevengeRAT
Detection:
malicious
Classification:
troj
Score:
68 / 100
Signature
Antivirus / Scanner detection for submitted sample
Machine Learning detection for sample
Multi AV Scanner detection for submitted file
Yara detected RevengeRAT
Behaviour
Behavior Graph:
Threat name:
ByteCode-MSIL.Backdoor.RevengeRAT
Status:
Malicious
First seen:
2020-09-12 20:17:39 UTC
AV detection:
26 of 29 (89.66%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

RevengeRAT

Executable exe c04ec7f7397f2fccbf7fd967a5aa4aeca57c17dc1dac557bbe405ca8423c35ee

(this sample)

Comments