General

  • Target

    d9a9a7ab99db0946ecb0f5f398eddd0d820ffbde0105164064e168f1ea73ba26

  • Size

    16KB

  • MD5

    52f3fc5a0291ddd479c11c1e0e9f00b9

  • SHA1

    bb461e104c52bf05cadf9b332bca49e30596fe24

  • SHA256

    d9a9a7ab99db0946ecb0f5f398eddd0d820ffbde0105164064e168f1ea73ba26

  • SHA512

    c4b9f4ecb455c1014ce5729c480fe7c7b79f86e3b7a89caebdb98aeaa3d5e6ef18d4796c0a595539aeb112c840df4980c160b449909f659dbe362d1315bae288

  • SSDEEP

    384:OWCWh/MwiWUW8WcRfH3dtr9oDPlMNcLlb5sVKlyER5Ct:OWCWh/niWUW8WI/33clMNEXRo

Malware Config

Extracted

Family

revengerat

Botnet

R A D

C2

KevinDavis-58161.portmap.host:58161

Mutex

RV_MUTEX

Signatures

  • RevengeRat Executable 1 IoCs
  • Revengerat family

Files

  • d9a9a7ab99db0946ecb0f5f398eddd0d820ffbde0105164064e168f1ea73ba26
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections