Behavioral task
behavioral1
Sample
5a1540604aff786d6937c9d66808455cf0f66592c5766a6991dc5a435a00e6da.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
5a1540604aff786d6937c9d66808455cf0f66592c5766a6991dc5a435a00e6da.exe
Resource
win10v2004-20220721-en
General
-
Target
5a1540604aff786d6937c9d66808455cf0f66592c5766a6991dc5a435a00e6da
-
Size
214KB
-
MD5
f9a2cbbaeae0112641305ca357e4df86
-
SHA1
d3a9989ad4e4f1beb1e328c0f961bcc8565c5814
-
SHA256
5a1540604aff786d6937c9d66808455cf0f66592c5766a6991dc5a435a00e6da
-
SHA512
d8607bf05656377a27d25ce34a1e35c238fed8e9cb89284214ac76cf0b56685ceceba5f0041660e709e9c0f8207356d6c120b05735b8f262d5ef660f26ef1e0b
-
SSDEEP
1536:bXo4uLFO16vJx4zaZBtGbr0pYibMo6T2+oDI3JRaCAd1uhNRZ:ro4eg/0yFTloUHp
Malware Config
Signatures
-
RevengeRat Executable 1 IoCs
Processes:
resource yara_rule sample revengerat -
Revengerat family
Files
-
5a1540604aff786d6937c9d66808455cf0f66592c5766a6991dc5a435a00e6da.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 226B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 162KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ