General

  • Target

    caf49a811e4195961bf725e9da3249fa_JaffaCakes118

  • Size

    24KB

  • MD5

    caf49a811e4195961bf725e9da3249fa

  • SHA1

    f11b2b8d9d11b083468cf445ed1aff154cdd8de5

  • SHA256

    ff8c7ac8e68733de6e226beb30886039f388ba28c638d795a5a7ff427e80fbb5

  • SHA512

    e7682c2c3350db17865e3ec002fcfcd8e0bd8fd8f1128d298a05ffe0e847d07ec352d8d92d9a1fa476ab5c1fe90e5a0315503b82b072baf5b861495bf3952426

  • SSDEEP

    192:Rl5+8Pa9S8kjYTDGgbcp4Llp2SAfF9aEOnryD91ABkGxVXTIqoNGRJ0:Rl5P/jYTDGggpM23fJWyDbAnx/oNV

Malware Config

Extracted

Family

revengerat

Botnet

NyanCatRevenge

C2

68.183.135.238:333

Mutex

6f2924775918

Signatures

  • Revengerat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • caf49a811e4195961bf725e9da3249fa_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections