revengerat | 02A09B72EFA209C448B7C77C0A776D0FFC4647B433040[.]exe | Triage

Sharing

General

Target

02A09B72EFA209C448B7C77C0A776D0FFC4647B433040.exe
Size

194KB
MD5

d9fe8f376ad526bafe4d4ec499434afb
SHA1

465c25802ef9f08173cd4c3fd4e35660eef53144
SHA256

02a09b72efa209c448b7c77c0a776d0ffc4647b433040cf812047b2aaa90c920
SHA512

c169bf155145e45f08074780ab2cbebda97381330f271e02a0c7f58d223df1762fc897d34a777610ba1a3529557ca4e7a8cdc4a50d2da53f732209c92627a1c0
SSDEEP

6144:tNE9QIYoBHxHGZzSESTEuT3iPz2wNaSoC:tcBApS4ub8awNaS

Score

10^/10

stealer revengerat

Malware Config

Signatures

RevengeRat Executable 1 IoCs
stealer

Processes:

resource yara_rule

sample revengerat
Revengerat family
revengerat

Files

02A09B72EFA209C448B7C77C0A776D0FFC4647B433040.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ