General

  • Target

    bSvX.exe

  • Size

    14KB

  • MD5

    1ed6e346e435a7f400dbededcadaa2f0

  • SHA1

    038ecc17f62eba1d70b90801bd877d9880e45e33

  • SHA256

    baa85d8fac6543991982603906aee5e16c88bc08a3916680775de0000fc9996e

  • SHA512

    e58ad23810048ca3ab8a1eea9a40f3c7c28c624edffabf8d3853778adbdaa52948cdacb89247569179874dc95fae1cb05a7d5ed8e327df201420fb5e797a29ac

  • SSDEEP

    192:r+8C+EKS0O9ejYTDG8bcp4LlzKnieXubWyD9JEBkGxVXlqoN+RJw:rNVjYTDG8gpaReXTyD3Enx6oNJ

Malware Config

Extracted

Family

revengerat

Botnet

NyanCatRevenge

C2

marcelotatuape.ddns.net:333

Mutex

a54226e12d434c8fa6b

Signatures

  • Revengerat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bSvX.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections