Static task
static1
Behavioral task
behavioral1
Sample
06cab04ec2f82be886f16eed5fcdc5af04b8dbf5095f3471c246436487f34392.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
06cab04ec2f82be886f16eed5fcdc5af04b8dbf5095f3471c246436487f34392.exe
Resource
win10v2004-20220414-en
General
-
Target
06cab04ec2f82be886f16eed5fcdc5af04b8dbf5095f3471c246436487f34392
-
Size
16KB
-
MD5
78ed2fd0ed8b9c5bc292366d5685c87f
-
SHA1
4807d848979e573bd984b1eee463b84c59aa0e46
-
SHA256
06cab04ec2f82be886f16eed5fcdc5af04b8dbf5095f3471c246436487f34392
-
SHA512
ee19d51543612ae2cc6f46f435825ce23716f8165d8e10e4d6dab07a9ce5b20c89a041a7df8067208a695818d62ffb5382ea2c45d5b7d9a877343c2a669dd144
-
SSDEEP
384:nXmbfKllLNfZ5X9oDPlMNcLlb5sVKjy35Ct:nXmbfKll5TclMNEao
Malware Config
Extracted
revengerat
Guest
127.0.0.1:333
173.232.146.244:333
RV_MUTEX
Signatures
-
RevengeRat Executable 1 IoCs
Processes:
resource yara_rule sample revengerat -
Revengerat family
Files
-
06cab04ec2f82be886f16eed5fcdc5af04b8dbf5095f3471c246436487f34392.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ