General

  • Target

    76de0b9545606106f1cf79f9fa3cbe3e_JaffaCakes118

  • Size

    17KB

  • MD5

    76de0b9545606106f1cf79f9fa3cbe3e

  • SHA1

    70137b6ded4abca800ca0ef88b6b10e6c24be741

  • SHA256

    2dd6421f948f25090a18784cab9348d5f5ab04b5b84a386f4ef7a70b19c61236

  • SHA512

    f4bc4e9ba377cfecbfbe056de7b31d73bd36f0f6487467288244a6bd932ba127a03bcb71473d9ef6123c05dd8c60d2d9041c76ea02b5751549cf5cd1cccbbfef

  • SSDEEP

    384:1J7Jt6iJXyhIiVTIPIvnbisV1dYRqyRLu2s2:1J7JtzCNdIomIoFa2

Malware Config

Extracted

Family

revengerat

Botnet

Mikoed

C2

127.0.0.1:4040

69.87.219.76:4040

Mutex

RV_MUTEX

Signatures

  • RevengeRat Executable 1 IoCs
  • Revengerat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 76de0b9545606106f1cf79f9fa3cbe3e_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections