Overview

overview

10

Static

static

10

renek3.exe

windows7_x64

1

renek3.exe

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    renek3.exe

  • Size

    20KB

  • MD5

    f7d629a9165ddb871f4d71858858b059

  • SHA1

    d1e43b0754c1e40f2063475f07ef6645f8dc97b6

  • SHA256

    c7eb71f09f5cf205160a9bb1b064301928ed20017cd2bb9eaf7720466caa4467

  • SHA512

    e5035e9139ee6af6075b6f2e86458fdc825e6c86e7cdd95863c278d77d09c9ce84ed25c65313a1d2c87e7e22b576f4cceae24b81d2db50cfe57842d9d0af2c61

Score
10/10
stealerclientrevengerat

Malware Config

Extracted

Family

revengerat

Botnet

Client

C2

127.0.0.1:333

127.0.0.1:37337

127.0.0.1:1243

whatelse.us:333

whatelse.us:37337

whatelse.us:1243

nothing.else:333

nothing.else:37337

nothing.else:1243

mothers.lol:333

mothers.lol:37337

mothers.lol:1243

<svg>.com:333

<svg>.com:37337

<svg>.com:1243
Mutex

RV_MUTEX

Signatures

  • RevengeRat Executable 1 IoCs
    stealer
  • Revengerat family
    revengerat

Files

  • renek3.exe
    .exe windows x86