███████╗██╗ ██╗██╗██╗ ███╗ ███╗██╗ ██╗████████╗███████╗██╗ ██╗ ██╔════╝██║ ██║██║██║ ████╗ ████║██║ ██║╚══██╔══╝██╔════╝╚██╗██╔╝ █████╗ ██║ ██║██║██║ ██╔████╔██║██║ ██║ ██║ █████╗ ╚███╔╝ ██╔══╝ ╚██╗ ██╔╝██║██║ ██║╚██╔╝██║██║ ██║ ██║ ██╔══╝ ██╔██╗ ███████╗ ╚████╔╝ ██║███████╗ ██║ ╚═╝ ██║╚██████╔╝ ██║ ███████╗██╔╝ ██╗ ╚══════╝ ╚═══╝ ╚═╝╚══════╝ ╚═╝ ╚═╝ ╚═════╝ ╚═╝ ╚══════╝╚═╝ ╚═╝

⚠

RevengeRAT

rat1 mutex signatures

[BASIC_INFORMATION]

FAMILY_NAME:

RevengeRAT

CATEGORY:

RAT

DESCRIPTION:

RevengeRAT is a remote access trojan (RAT) that has been active since at least 2016. It is known for its wide range of capabilities, including remote control, keylogging, and file system manipulation. The malware is often distributed through phishing campaigns.

ALIASES:

Revenge-RAT

TAGS:

remote_access_trojankeyloggingphishing

[MUTEX_SIGNATURES](1)

[MUTEX_01]

RV_MUTEX-<random>

ANALYST: @adhikara13 DATE: 2025-07-12

REFERENCES:

https://www.fortinet.com/blog/threat-research/malware-analysis-revenge-rat-sample

[QUICK_ACTIONS]

[THREAT_INTELLIGENCE]

ATTRIBUTION:

⚠Unknown

FIRST_OBSERVED:

2016

[SIGMA_RULE]

[STATISTICS]

MUTEX_COUNT:1

THREAT_ACTORS:1

ALIASES:1

TAGS:3

CATEGORY:RAT

Malware profile loaded successfully