Overview

overview

10

Static

static

10

0d05942ce5...3e.exe

windows7-x64

1

0d05942ce5...3e.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    0d05942ce51fea8c8724dc6f3f9a6b3b077224f1f730feac3c84efe2d2d6d13e.zip
  • Size 44KB
  • Sample231005-ha6bqaba39
  • SHA256 b1e60654c8ec10842163c0b57224f1bbdbb9536dcd86da916a5d16379a08c7a9
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
stealerguestrevengerat

Malware Config

Extracted

Family

  • revengerat

Botnet

  • Guest

C2

  • 127.0.0.1:1177

Mutex

  • RV_MUTEX-RZblRvZwfRtN

Signatures

  • RevengeRat Executable 1 IoCs
    stealer
  • Revengerat family
    revengerat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 0d05942ce51fea8c8724dc6f3f9a6b3b077224f1f730feac3c84efe2d2d6d13e.zip
    .zip 44KB
  • 0d05942ce51fea8c8724dc6f3f9a6b3b077224f1f730feac3c84efe2d2d6d13e
    .exe 105KB

0d05942ce51fea8c8724dc6f3f9a6b3b077224f1f730feac3c84efe2d2d6d13e.zip

  • SHA256 b1e60654c8ec10842163c0b57224f1bbdbb9536dcd86da916a5d16379a08c7a9
  • MD5 SHA1 SHA512 SSDEEP
Password
infected