Overview

overview

10

Static

static

10

547423fcd0...9f.exe

windows7-x64

1

547423fcd0...9f.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    547423fcd0fd56fddcc3fae4f364fd14a972f4704ec0babeb37cfde1dbadd49f

  • Size

    17KB

  • MD5

    c7f4677ac9c92ec3bada199a18fb7ac8

  • SHA1

    aa64ea570faba4b8efa0a43f4c9ce964ff19eb39

  • SHA256

    547423fcd0fd56fddcc3fae4f364fd14a972f4704ec0babeb37cfde1dbadd49f

  • SHA512

    44f74f7fce763b86b5374723208ac25439a7babffdc7eef43152445af0aef3e0baa21e55235e5eee201c34049af34bdee210e3c05708e1a1315563ddd12e499b

  • SSDEEP

    384:Nemc9rN2neY9oDPlMNcLlb5sVK8ya5Ct:gmcfOpclMNE+o

Score
10/10
stealerprotocolrevengerat

Malware Config

Extracted

Family

revengerat

Botnet

Protocol

C2

totallol.duckdns.org:1995

totallol1.duckdns.org:1995

totallol2.duckdns.org:1995

totallol3.duckdns.org:1995
Mutex

RV_MUTEX-PSAtYBxGgZHxu

Signatures

  • RevengeRat Executable 1 IoCs
    stealer
  • Revengerat family
    revengerat

Files

  • 547423fcd0fd56fddcc3fae4f364fd14a972f4704ec0babeb37cfde1dbadd49f
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections