revengerat | 0d06e78afdd1a87d0a35f3b63ab9eb51[.]bin

General

Target
0d06e78afdd1a87d0a35f3b63ab9eb51.bin
Size 11KB
Sample240110-beax2saghr
SHA256 acef36533f93ae88a928451dbaf648885b0a94e79905587e48fd847bbaed4027
MD5 b69e3a279bfc3e211b99bf2b24490c12
SHA1 b3fbede5577e048b8485acd04187f45634623dea
SHA512 a89d956fa6ebd8d63713af32c72e80a7b3b6000c2834c7a3c50a8df384aa8b91f7dcd357fa6c5a326e6ef2b3e8be7208f1be408cf8a897664f601e1cacc03d85
SSDEEP 192:qjgUrJ7YV2w8SZO/P0znJx6EZht7CU4gd1yIlho8QY7Pw4aYekjEje:qvFYV2rYlJcEZhZNlc2Q8w1IjEC
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

stealer revengerat

Malware Config

Signatures

RevengeRat Executable 1 IoCs

stealer

resource	yara_rule
static1/unpack001/156e13c6490c8301b32f8002b493756b705267eb7c5463e673b905fe265f7470.exe	revengerat

Revengerat family
revengerat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/156e13c6490c8301b32f8002b493756b705267eb7c5463e673b905fe265f7470.exe

File Explorer

0d06e78afdd1a87d0a35f3b63ab9eb51.bin

.zip 11KB
156e13c6490c8301b32f8002b493756b705267eb7c5463e673b905fe265f7470.exe

.exe 48KB

0d06e78afdd1a87d0a35f3b63ab9eb51.bin

SHA256 acef36533f93ae88a928451dbaf648885b0a94e79905587e48fd847bbaed4027
MD5 b69e3a279bfc3e211b99bf2b24490c12
SHA1 b3fbede5577e048b8485acd04187f45634623dea
SHA512 a89d956fa6ebd8d63713af32c72e80a7b3b6000c2834c7a3c50a8df384aa8b91f7dcd357fa6c5a326e6ef2b3e8be7208f1be408cf8a897664f601e1cacc03d85
SSDEEP 192:qjgUrJ7YV2w8SZO/P0znJx6EZht7CU4gd1yIlho8QY7Pw4aYekjEje:qvFYV2rYlJcEZhZNlc2Q8w1IjEC
MD5 SHA1 SHA512 SSDEEP

Password

infected

156e13c6490c8301b32f8002b493756b705267eb7c5463e673b905fe265f7470.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 156e13c6490c8301b32f8002b493756b705267eb7c5463e673b905fe265f7470
MD5 0d06e78afdd1a87d0a35f3b63ab9eb51
SHA1 4bb6d7d31b6a8031b0a1fdfa7561739a98ca9c19
SHA512 513c84e8d481f13118538733bb2b9ba3843c321d23463de1fe7e9e09795c631ac3940340bb94a0cce5ebb0e24a536a465040978c7718ee22c02df849fa4771a9
SSDEEP 384:WwCnIBDZN+J90OIYrbBtrqmxq0EKPq13wc2C3qdErIhfBIV5mWsvW:WaZ470OIY3HXEueBqaYIV5U
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

RevengeRat Executable

stealer
Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

29534

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

0d06e78afdd1a87d0a35f3b63ab9eb51.bin

156e13c6490c8301b32f8002b493756b705267eb7c5463e673b905fe265f7470.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

0d06e78afdd1a87d0a35f3b63ab9eb51.bin

156e13c6490c8301b32f8002b493756b705267eb7c5463e673b905fe265f7470.exe

mscoree

dotnet