Static task
static1
Behavioral task
behavioral1
Sample
0914cce2d626af56eb2c8cd40a74d130027ed365f24481564dc0c59aea168d11.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
0914cce2d626af56eb2c8cd40a74d130027ed365f24481564dc0c59aea168d11.exe
Resource
win10v2004-20220414-en
General
-
Target
0914cce2d626af56eb2c8cd40a74d130027ed365f24481564dc0c59aea168d11
-
Size
16KB
-
MD5
5c0a1df2f47801b3a8d04b399c764d86
-
SHA1
316ba2bd4778c9b5c1cd79cf20bc82447d82a7da
-
SHA256
0914cce2d626af56eb2c8cd40a74d130027ed365f24481564dc0c59aea168d11
-
SHA512
6f05b12b659bae446094e9cb45b28811f9fcc6883fabde9fa56f5eea7c62672712a695c2126949bbfc1d4e619f10d5eb93305d5cd09bae1e472f4637f13761f2
-
SSDEEP
384:h3MnGr/qllb9yHkCn9oDPlMNcLlb5sVKxUyZ5Ct:5MnGr/qllorclMNE7o
Malware Config
Extracted
revengerat
TesT 1
103.70.6.252:7777
RV_MUTEX-ECaKuSAtYBxGg
Signatures
-
RevengeRat Executable 1 IoCs
Processes:
resource yara_rule sample revengerat -
Revengerat family
Files
-
0914cce2d626af56eb2c8cd40a74d130027ed365f24481564dc0c59aea168d11.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ