General
- Target ytest.exe
- Size 17KB
- Sample240507-2x2rlafd95
- SHA256 85e9a8d8534e40e9f4c31205ebfcccbb5fea486f16f20e79736b40e7148c5ea2
- MD5 bea42ab66c20e55f6eb2746eb051e7f8
- SHA1 3fa591e857edfd560ddf6536974126f18159996b
- SHA512 4ee14c1d306e81c535ee7071474b539abdbdc681dbfa9f6f128744073610230252d1ce273699044edd1b3886e41e217b8d3dde18d4550c7c51b58fcb688280bf
- SSDEEP 384:UHzdzvqfxqvv2HP9oDPlMNcLlb5sVK6yI5Ct:ezdzvqUvvwclMNEKo
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
ytest.exe
Resource
win10-20240404-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ytest.exe
Resource
win10v2004-20240419-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
ytest.exe
Resource
win11-20240419-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
revengerat
Botnet
-
Guest
C2
-
127.0.0.1:333
-
127.0.0.1:35477
-
rachelere-35477.portmap.host:333
-
rachelere-35477.portmap.host:35477
Mutex
-
RV_MUTEX
Targets
-
- Target ytest.exe
- Size 17KB
- SHA256 85e9a8d8534e40e9f4c31205ebfcccbb5fea486f16f20e79736b40e7148c5ea2
- MD5 bea42ab66c20e55f6eb2746eb051e7f8
- SHA1 3fa591e857edfd560ddf6536974126f18159996b
- SHA512 4ee14c1d306e81c535ee7071474b539abdbdc681dbfa9f6f128744073610230252d1ce273699044edd1b3886e41e217b8d3dde18d4550c7c51b58fcb688280bf
- SSDEEP 384:UHzdzvqfxqvv2HP9oDPlMNcLlb5sVK6yI5Ct:ezdzvqUvvwclMNEKo
- MD5 SHA1 SHA512 SSDEEP
Score1/10