Static task
static1
Behavioral task
behavioral1
Sample
a6f7774c76ee23dd30712fe5362651dd9895ec275ebcf84b276540d3099ad804.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
a6f7774c76ee23dd30712fe5362651dd9895ec275ebcf84b276540d3099ad804.exe
Resource
win10v2004-en-20220113
General
-
Target
a6f7774c76ee23dd30712fe5362651dd9895ec275ebcf84b276540d3099ad804
-
Size
83KB
-
MD5
f049cf0b255b3697e3fd5acaddd70f30
-
SHA1
0032a97de4339f52b31202bc19a41ad8a1a367c2
-
SHA256
a6f7774c76ee23dd30712fe5362651dd9895ec275ebcf84b276540d3099ad804
-
SHA512
eb9a3639821a6c28f6fd258cf9733e2ce9907431cbe83157eda4006b3a81ba150227c6f61c83ba5ab31911ad5e977670a4be0bbad8da83f51bdb07b1520dca60
-
SSDEEP
1536:+m5r5VOPAFWWRtYdM5d4dIQFZlW6SRV3+eqZTApT8v:+m5rboAQWz5GdIQFZ8HRVFqc4v
Malware Config
Extracted
revengerat
Guest
83.159.223.112:1604
RV_MUTEX
Signatures
-
RevengeRat Executable 1 IoCs
Processes:
resource yara_rule sample revengerat -
Revengerat family
Files
-
a6f7774c76ee23dd30712fe5362651dd9895ec275ebcf84b276540d3099ad804.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ