Extracted

• • Target

    4393b05a23f05af255589f1c32935811d2e6a8f112e54c956b8c52051e0a4669

  • Size

    361KB

  • MD5

    ee6d202c314430288e1babc3c9256f40

  • SHA1

    e1db7db841535428e0bd482b6fcd4e35a5ec7c33

  • SHA256

    4393b05a23f05af255589f1c32935811d2e6a8f112e54c956b8c52051e0a4669

  • SHA512

    ef6ef49b3e5a57a699b2802d2a53ff48db3230e68944bb1b69f8f77180c283055f2efaee59553c7e19371e0bb904084e178f26cea8312ca55e2280057552ecf2

  Score

  10^/10

  webmonitorbackdoorinfostealerratsuricataupx

  • RevcodeRat, WebMonitorRat

    WebMonitor is a remote access tool that you can use from any browser access to control, and monitor your phones, or PCs.

    backdoorratinfostealerwebmonitor

  • WebMonitor Payload

  • suricata: ET MALWARE WebMonitor/RevCode RAT CnC Domain in DNS Lookup

    suricata: ET MALWARE WebMonitor/RevCode RAT CnC Domain in DNS Lookup

    suricata

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  behavioral1behavioral2