General

  • Target

    Client.exe

  • Size

    16KB

  • MD5

    b4d9bc79a28df9600869cc10b2318cca

  • SHA1

    608e748498f752fe279f1fcb757ee8e886a45f2e

  • SHA256

    d65b871b01899363d2445afb88c27caaeb65a376b1bd8475db2a6ed928882161

  • SHA512

    a6b1f42b00cd5722cc906750cc86c25a89d037b47f5d5b29bb0fd4901e15ff11795fcc74f818bac89a33bee5ec04f57942b52aad837fb5c8bed91e0ee0e94e2c

  • SSDEEP

    384:Z/5gk7lVzF3stf9oDPlMNcLlb5sVKhyS5Ct:Z/5gk7lVZUclMNEdo

Malware Config

Extracted

Family

revengerat

Botnet

Guest

C2

127.0.0.1:333

Mutex

RV_MUTEX

Signatures

  • RevengeRat Executable 1 IoCs
  • Revengerat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Client.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections