Overview

overview

10

Static

static

10

54415bb6bb...57.exe

windows7-x64

10

54415bb6bb...57.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5a3fe2b16102676e5d544d2887996b6b.bin

  • Size

    9KB

  • MD5

    1e49c6853804b366c1a86e7526cdfc43

  • SHA1

    b9eaa6736c629d029dc7165d363f22798d8da6d1

  • SHA256

    ef46c48b671138bfbfb585bb0234aeded02cf0307840ea2d490c6c106d14b9db

  • SHA512

    6f44e5d89b4f9556209fd5db83db95044940965e080a436070d43b0d04d851e1db91471dcea9a8bbb56fa88e1812cae3f24df293fd41b1834231c1ec840779ea

  • SSDEEP

    192:wP9H7fyETIJF8T2OPibtkAtmY0Y/FgE1CP9nyZjjx3:wPxfyAIJKTS6qmeeE1CP9ydj5

Score
10/10
stealerguestrevengerat

Malware Config

Extracted

Family

revengerat

Botnet

Guest

C2

93.83.35.2:4782

Mutex

RV_MUTEX

Signatures

  • RevengeRat Executable 1 IoCs
    stealer
  • Revengerat family
    revengerat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5a3fe2b16102676e5d544d2887996b6b.bin
    .zip

    Password: infected

  • 54415bb6bb53153601096390f84d9306b5476f98b96908ebcf144bd0b7569f57.exe
    .exe windows:4 windows x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections