General

  • Target

    renek3.exe

  • Size

    20KB

  • Sample

    201120-w3fyxje5bn

  • MD5

    f7d629a9165ddb871f4d71858858b059

  • SHA1

    d1e43b0754c1e40f2063475f07ef6645f8dc97b6

  • SHA256

    c7eb71f09f5cf205160a9bb1b064301928ed20017cd2bb9eaf7720466caa4467

  • SHA512

    e5035e9139ee6af6075b6f2e86458fdc825e6c86e7cdd95863c278d77d09c9ce84ed25c65313a1d2c87e7e22b576f4cceae24b81d2db50cfe57842d9d0af2c61

Malware Config

Extracted

Family

revengerat

Botnet

Client

C2

127.0.0.1:333

127.0.0.1:37337

127.0.0.1:1243

whatelse.us:333

whatelse.us:37337

whatelse.us:1243

nothing.else:333

nothing.else:37337

nothing.else:1243

mothers.lol:333

mothers.lol:37337

mothers.lol:1243

<svg>.com:333

<svg>.com:37337

<svg>.com:1243

Mutex

RV_MUTEX

Targets

    • Target

      renek3.exe

    • Size

      20KB

    • MD5

      f7d629a9165ddb871f4d71858858b059

    • SHA1

      d1e43b0754c1e40f2063475f07ef6645f8dc97b6

    • SHA256

      c7eb71f09f5cf205160a9bb1b064301928ed20017cd2bb9eaf7720466caa4467

    • SHA512

      e5035e9139ee6af6075b6f2e86458fdc825e6c86e7cdd95863c278d77d09c9ce84ed25c65313a1d2c87e7e22b576f4cceae24b81d2db50cfe57842d9d0af2c61

    Score
    1/10

MITRE ATT&CK Matrix

Tasks