revengerat | da7cc032d5880c1eb6d7fb741b66f4e5[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da7cc032d5880c1eb6d7fb741b66f4e5.bin
Size

7KB
MD5

d6424f7f0fd30642bdda3aa15dfbe72b
SHA1

868cadb364a94e02b7b9be820e9d5dca6d6556f1
SHA256

0a863729eaa9bc1321a5551776e310c0b31313c1baa76af3af34c2f79851f7c6
SHA512

ac7b27d5b0f723c384125c882c5d0351c63bb8ac5b2a5486088f364db8ba9666f4a7d2368b7b5f6a46e2e8210ea6df84176127ce25c1d8f857fe7022a25952ed
SSDEEP

96:HIS7egV5YrDZt9ggV3P+7n8xOr8xT8Hnd2FPrOwv1m0pjejstKAci98EL3S6yCUJ:b7egVqb3m7nDr8xTQiPre0Ujb61Zht4

Score

10^/10

nyancatrevenge revengerat

Malware Config

Extracted

Family

revengerat

Botnet

NyanCatRevenge

C2

marcelotatuape.ddns.net:333

Mutex

281db369c9dc4bc4b1

Signatures

Revengerat family
revengerat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/87315f1e56b06d1ac600c399f30f5dc13dedb1cc2c20bcfe79f71b76b5716718.exe

Files

da7cc032d5880c1eb6d7fb741b66f4e5.bin
.zip

Password: infected
87315f1e56b06d1ac600c399f30f5dc13dedb1cc2c20bcfe79f71b76b5716718.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ