General

  • Target

    0b3ca8fc417a9e5ac4101babf092999399fe7aadc4d8b68b4707e8297db0a08e

  • Size

    16KB

  • MD5

    99250e771feb3b70e4122bbc54a79f8e

  • SHA1

    432d8117bc544918bdaecc01c6ce68305cfd2e86

  • SHA256

    0b3ca8fc417a9e5ac4101babf092999399fe7aadc4d8b68b4707e8297db0a08e

  • SHA512

    6f0bc3b1c7a73009d1ca71a3ad08fcf76d66e32e25cba9d7a547e95b178b1d5dd4699c07beb49add607063513c37158809ed640e1deb9011265b1bdf9f7fd284

  • SSDEEP

    384:GWCWh/MwiWUW8WcRfH3dtr9oDPlMNcLlb5sVKly+5Ct:GWCWh/niWUW8WI/33clMNEJo

Malware Config

Extracted

Family

revengerat

Botnet

R A D

C2

KevinDavis-58161.portmap.host:58161

Mutex

RV_MUTEX

Signatures

  • RevengeRat Executable 1 IoCs
  • Revengerat family

Files

  • 0b3ca8fc417a9e5ac4101babf092999399fe7aadc4d8b68b4707e8297db0a08e
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections