General

  • Target

    02b58fea1b5d609fe461e56899151f5c_JaffaCakes118

  • Size

    110KB

  • MD5

    02b58fea1b5d609fe461e56899151f5c

  • SHA1

    c2c2b0c9169c23a220802b881944276d437cacf9

  • SHA256

    176109ba62ae70b7ab45d589f3e20bedc6d9f306468c3cdff3138b87b923148e

  • SHA512

    8e7a598cd7fd1917c3ce56d246fa09ca26951a71e0d5a61f89a1a27a444366702eb1d6ba005dc9489dc9d2475512c703087ae64ca76c29a9267db29a6ad5969e

  • SSDEEP

    3072:D4BWGNaXLZNop7ZV0KvhV5nvCas4D09SYu2b:8WisLAp7ZVlvlqkD87u2

Malware Config

Extracted

Family

revengerat

Botnet

Guest

C2

41.160.177.182:333

Mutex

RV_MUTEX-tWwiejYAoBLOa

Signatures

  • RevengeRat Executable 1 IoCs
  • Revengerat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 02b58fea1b5d609fe461e56899151f5c_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections