General

  • Target

    bTGy.exe

  • Size

    14KB

  • MD5

    bcb1180be3b4da48af8713ba02f9a9fc

  • SHA1

    4deab3f35a948fa6c90175fae8380f32c5302472

  • SHA256

    340f4a7db0024413428f3663d06af5d5b430a2dadc8931a8b6c75b650e951f69

  • SHA512

    11861f2ea28b9a54ce5dd5cfc5b0b2858ecc82fdbef1cf0639898da7c7d6395513e49283845d8a189772b341f724255acfd7966d25d91c147eba87380abf0c9d

  • SSDEEP

    192:V+8C+EKS0O9ejYTDG8bcp4Ll3FsnieXubWyD9JEBkGxVXnqoN9RJE:VNVjYTDG8gpW9eXTyD3EnxMoNy

Malware Config

Extracted

Family

revengerat

Botnet

NyanCatRevenge

C2

marcelotatuape.ddns.net:333

Mutex

13b150f8ef23499092

Signatures

  • Revengerat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bTGy.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections