General

  • Target

    5A3FE2B16102676E5D544D2887996B6B_JC.exe

  • Size

    20KB

  • MD5

    5a3fe2b16102676e5d544d2887996b6b

  • SHA1

    0d55efec487bcca7488b4a6dba6dd568fd21b846

  • SHA256

    54415bb6bb53153601096390f84d9306b5476f98b96908ebcf144bd0b7569f57

  • SHA512

    c67b405102f9e21167e2c529cf7f1cf50f1c469e575503276e4a3b1e9cfcd04ed547cd6279757d9967e4754ed1746e4d1c8057788269b71862e531529be1a11c

  • SSDEEP

    384:ZGzk5TqjkV5ULD6GieFVKoyRsSap8yzDE:ZGzk5E/LWGie3eODE

Malware Config

Extracted

Family

revengerat

Botnet

Guest

C2

93.83.35.2:4782

Mutex

RV_MUTEX

Signatures

  • RevengeRat Executable 1 IoCs
  • Revengerat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5A3FE2B16102676E5D544D2887996B6B_JC.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections