revengerat | HEUR-Trojan[.]Win32[.]RRAT[.]gen-d45ab6328d392df91c86b67708bf1994f8b3dd263edd88b91ff0b02e738fb250

General

Target
HEUR-Trojan.Win32.RRAT.gen-d45ab6328d392df91c86b67708bf1994f8b3dd263edd88b91ff0b02e738fb250
Size 14KB
Sample221229-svdsbadc96
SHA256 d45ab6328d392df91c86b67708bf1994f8b3dd263edd88b91ff0b02e738fb250
MD5 6190f256f439aaa3e69ff3706bae736a
SHA1 67a21c97c585078c4bfbafef6059d2f12167108e
SHA512 ca4223923ac57c420a39532f51f32f7ec44af081bd526bec9d8e13929e1aeb7a1414762c22226bb21690b920a249bbe2ff3db8e73151e19fc035525462620f36
SSDEEP 192:4+8C+EKS0O9ejYTDG8bcp4LlBEfTdSeFZ7f2MaD8JEBkGxVX/8oNmRJu:4NVjYTDG8gpMEbdSejrvaDWEnx2oND
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

nyancatrevenge revengerat

Malware Config

Extracted

Family

revengerat

Botnet

NyanCatRevenge

C2

cuenta.hopto.org:5214

Mutex

8cb3378ccda34d1da8

Signatures

Revengerat family
revengerat

File Explorer

HEUR-Trojan.Win32.RRAT.gen-d45ab6328d392df91c86b67708bf1994f8b3dd263edd88b91ff0b02e738fb250

.exe 14KB

HEUR-Trojan.Win32.RRAT.gen-d45ab6328d392df91c86b67708bf1994f8b3dd263edd88b91ff0b02e738fb250

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 d45ab6328d392df91c86b67708bf1994f8b3dd263edd88b91ff0b02e738fb250
MD5 6190f256f439aaa3e69ff3706bae736a
SHA1 67a21c97c585078c4bfbafef6059d2f12167108e
SHA512 ca4223923ac57c420a39532f51f32f7ec44af081bd526bec9d8e13929e1aeb7a1414762c22226bb21690b920a249bbe2ff3db8e73151e19fc035525462620f36
SSDEEP 192:4+8C+EKS0O9ejYTDG8bcp4LlBEfTdSeFZ7f2MaD8JEBkGxVX/8oNmRJu:4NVjYTDG8gpMEbdSejrvaDWEnx2oND
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

20510

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing