Overview

overview

10

Static

static

10

857395c22c...18.exe

windows7-x64

1

857395c22c...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    857395c22c5bd4b707376b4cfc7c6308_JaffaCakes118

  • Size

    16KB

  • MD5

    857395c22c5bd4b707376b4cfc7c6308

  • SHA1

    263349185213ccf520dbcd246f02fcc2d515bd6b

  • SHA256

    c6204984759803b0498b654dc19e74e5d8791f398d98e3db290da1c89c832004

  • SHA512

    1c63b6ab3b62bf8fc980d0f033fdf41a6fcac11334193cc100f70a79c196bf7135dc8ad0de9b94339c63a9beb65e9c8c05296ef420bd06ae2c48979f9e07f89e

  • SSDEEP

    384:7t9+Xi9NVzGS7P9oDPlMNcLlb5sVKwyK5Ct:7t9+Xi9NkwclMNEyo

Score
10/10
stealerguestrevengerat

Malware Config

Extracted

Family

revengerat

Botnet

Guest

C2

0077.duckdns.org:44144

Mutex

RV_MUTEX

Signatures

  • RevengeRat Executable 1 IoCs
    stealer
  • Revengerat family
    revengerat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 857395c22c5bd4b707376b4cfc7c6308_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections