Static task
static1
Behavioral task
behavioral1
Sample
9875e40fdc8a015f70f64fe2adbd853490607bd52089ff67eebb68972c29eabb.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
9875e40fdc8a015f70f64fe2adbd853490607bd52089ff67eebb68972c29eabb.exe
Resource
win10v2004-20220414-en
General
-
Target
9875e40fdc8a015f70f64fe2adbd853490607bd52089ff67eebb68972c29eabb
-
Size
8.6MB
-
MD5
fbcb23d7c95d1b5ca9134e692a085ac1
-
SHA1
a831ba272fb35ab67f0f8bef5b2dd9795c6e7fb9
-
SHA256
9875e40fdc8a015f70f64fe2adbd853490607bd52089ff67eebb68972c29eabb
-
SHA512
a5ce354f7a0ab3dadbc1dfffe6846254f170ac67902844de84e6697e3ebf6f02a7d4ea2d1a98b7a42e87ef6fc08fdf3075b3bb7eebc93737e77aac3f312d4a64
-
SSDEEP
98304:VGbVX2bhVAZ3eObBPehNeaq/oSgHzvASvkQU0UHXKHXQdGk:kbIA3eEeuaAoJ5kQFUHXK3cGk
Malware Config
Signatures
-
RevengeRat Executable 1 IoCs
Processes:
resource yara_rule sample revengerat -
Revengerat family
Files
-
9875e40fdc8a015f70f64fe2adbd853490607bd52089ff67eebb68972c29eabb.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 8.5MB - Virtual size: 8.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ