Behavioral task
behavioral1
Sample
f0145c6b2a9193d8acf4d7824e97c273f20eab640a50e7e96a90cb1dc4cb27ac.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
f0145c6b2a9193d8acf4d7824e97c273f20eab640a50e7e96a90cb1dc4cb27ac.exe
Resource
win10v2004-20220721-en
General
-
Target
f0145c6b2a9193d8acf4d7824e97c273f20eab640a50e7e96a90cb1dc4cb27ac
-
Size
23KB
-
MD5
83646fd58f4e3294c3acd012e9bc2da2
-
SHA1
c89035b624f353832a633be6e040b801c5fa1ae0
-
SHA256
f0145c6b2a9193d8acf4d7824e97c273f20eab640a50e7e96a90cb1dc4cb27ac
-
SHA512
a16d6e4f0b0404b4bbc734fd92fb267c3d47bdb070ef4316779104ab60ce4c6e3df4c938952003e3184cade94d5a8fd9f9be910ba7b07562c8e94fc970c2d6b1
-
SSDEEP
384:egVml9DiGxpI45S176O6pyOsbgp0XlCWByChNQ:egVmb0hV6OoCvo
Malware Config
Extracted
revengerat
admin
34.95.176.194:5000
RV_MUTEX-DYBGldGoFYEKgHD
Signatures
-
RevengeRat Executable 1 IoCs
Processes:
resource yara_rule sample revengerat -
Revengerat family
Files
-
f0145c6b2a9193d8acf4d7824e97c273f20eab640a50e7e96a90cb1dc4cb27ac.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ