Overview

overview

10

Static

static

10

100c69a4f1...c7.exe

windows7-x64

1

100c69a4f1...c7.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    100c69a4f1448926bd2f78f087dcf0aa03bc2d826245fc36ff6cba023a456bc7.exe

  • Size

    17KB

  • MD5

    045938b09feefa0687052c3d871ab6e0

  • SHA1

    5c444c74adb2e415ee54195c80d5a24690070377

  • SHA256

    100c69a4f1448926bd2f78f087dcf0aa03bc2d826245fc36ff6cba023a456bc7

  • SHA512

    06ecc833918ef8e26db080e12cb424b8941dc48b9d7e14253ca8210c9ba22b52d265fd79d453de64fc755752e0dfc183b74c21c9d2c2c728d9527f2edd651867

  • SSDEEP

    384:e7mHny19HqmjuqRz9oDPlMNcLlb5sVK9y/5Ct:e7mHny19NjVtclMNEYo

Score
10/10
stealermarzo26revengerat

Malware Config

Extracted

Family

revengerat

Botnet

Marzo26

C2

marzorevenger.duckdns.org:4230

Mutex

RV_MUTEX-PiGGjjtnxDpn

Signatures

  • RevengeRat Executable 1 IoCs
    stealer
  • Revengerat family
    revengerat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 100c69a4f1448926bd2f78f087dcf0aa03bc2d826245fc36ff6cba023a456bc7.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections