Behavioral task
behavioral1
Sample
195d24613b49048af1759c54c19a0a4545a7b1da1f87526952e5eab04425fff3.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
195d24613b49048af1759c54c19a0a4545a7b1da1f87526952e5eab04425fff3.dll
Resource
win10v2004-20220812-en
General
-
Target
195d24613b49048af1759c54c19a0a4545a7b1da1f87526952e5eab04425fff3
-
Size
22KB
-
MD5
2bfe429793e4bed07d91455557fa864e
-
SHA1
e5d0a38e794e61796fd09f71dc6fe4668b8ea319
-
SHA256
195d24613b49048af1759c54c19a0a4545a7b1da1f87526952e5eab04425fff3
-
SHA512
9812e4ddfe19c7243c74967575be18f347924b80f855ef7adbc00b3460784eb5c1303e38ab42402b9600160b7d5cc5fd1439743c7566fd0242bb16b7a0ea70b7
-
SSDEEP
384:ek35Ye8KllraGDu0L39oDPlMNcLlb5sVKAyw5CtsnX+YwloZ:ek35Ye8KllG5aclMNEIo+naS
Malware Config
Extracted
revengerat
Signatures
-
RevengeRat Executable 1 IoCs
Processes:
resource yara_rule sample revengerat -
Revengerat family
Files
-
195d24613b49048af1759c54c19a0a4545a7b1da1f87526952e5eab04425fff3.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ