Overview

overview

10

Static

static

10

847e905f66...61.exe

windows7-x64

847e905f66...61.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    847e905f66a0081099439ac2b49d29755f4ad4c6ee60af8c386d7b6e87876a61

  • Size

    16KB

  • MD5

    4287349cfad063da9ee7a0d603de4b9b

  • SHA1

    4baa5cc01ad16b47023342cffb418bdcafab51f5

  • SHA256

    847e905f66a0081099439ac2b49d29755f4ad4c6ee60af8c386d7b6e87876a61

  • SHA512

    7e7c43aba49e828d5bbc899bbdf266efd37496b0c13a11c46d9a88d1db25daf19a28dfb0faad55d28f50a0bb48b441103c96ccd0aefb8a381adc8640e86186f1

  • SSDEEP

    192:MArl/uA7W/d1UR+WgMbwJFCNieLqaC9oDPlksMR/cLlbb+aR9nsVVImyx5+vtte:9/KQRpNGr9oDPlMNcLlb5sVKmyx5Ct

Score
10/10
stealerguestrevengerat

Malware Config

Extracted

Family

revengerat

Botnet

Guest

C2

127.0.0.1:4444

127.0.0.1:1337

192.168.1.3:4444

192.168.1.3:1337

192.168.137.1:4444

192.168.137.1:1337

192.168.1.2:4444

192.168.1.2:1337
Mutex

RV_MUTEX

Signatures

  • RevengeRat Executable 1 IoCs
    stealer
  • Revengerat family
    revengerat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 847e905f66a0081099439ac2b49d29755f4ad4c6ee60af8c386d7b6e87876a61
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections