General

  • Target

    crypted.bin

  • Size

    14KB

  • MD5

    97b83a956acfd1d88df14a123a71ddca

  • SHA1

    d6f0b6d6543d18e570c57f1095e9a9eab97f24fe

  • SHA256

    8bfdd772fb6c76463e5183114bd85834eb32c8210e0dd5346d789fe038dfd552

  • SHA512

    7e1c9891778c15707870f1b1b1bbf2c2b4bea6ef2f9d6eea035581d6828f4d0f240b0cb04e05cb5f979840aa84d11fce240728702b1735f01f10105797058fbe

  • SSDEEP

    192:e+8C+EKS0O9ejYTDG8bcp4LlXunieXubWyD9JEBkGxVXOqoNYRJE:eNVjYTDG8gp2NeXTyD3EnxpoNn

Malware Config

Extracted

Family

revengerat

Botnet

NyanCatRevenge

C2

marcelotatuape.ddns.net:333

Mutex

2180459765

Signatures

  • Revengerat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • crypted.bin
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections