Static task
static1
Behavioral task
behavioral1
Sample
10a28503ba499d3291c1efaef2d80b9b592080985145620a385ae81da445e834.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
10a28503ba499d3291c1efaef2d80b9b592080985145620a385ae81da445e834.exe
Resource
win10v2004-20220414-en
General
-
Target
10a28503ba499d3291c1efaef2d80b9b592080985145620a385ae81da445e834
-
Size
109KB
-
MD5
efc82597070103fb87f32c43869a90a3
-
SHA1
ac3dc577cc7a105cf6db8c43bf3c8e109080ea90
-
SHA256
10a28503ba499d3291c1efaef2d80b9b592080985145620a385ae81da445e834
-
SHA512
3f48b30cb0c14d572bad8ef8f2f00c9b2ddcf4f27dcc24c6a3966c1ce8fdc6ab95dceecf4584ae0784fe1d609d7b652c6977abdc81b59f0996df72d98f1f5303
-
SSDEEP
1536:/DPTm163Z4ks7KV0q39DVm0uJhe4mnp3iDBq+KLD3tSYMY:bz3uks7KV1Dm3Jhe4vDC9SYMY
Malware Config
Extracted
revengerat
Guest
gyhjgyj.myq-see.com:333
RV_MUTEX-AgZblRvZwfRtN
Signatures
-
RevengeRat Executable 1 IoCs
Processes:
resource yara_rule sample revengerat -
Revengerat family
Files
-
10a28503ba499d3291c1efaef2d80b9b592080985145620a385ae81da445e834.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ