Overview

overview

10

Static

static

10

3322d251af...87.exe

windows7-x64

3322d251af...87.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3322d251af320c0be964869e6e2dfba23181f7cce97a15507015df82ed3d4087

  • Size

    16KB

  • MD5

    ef894461a9e1c9266592fafb55cfe172

  • SHA1

    2fd3d2d4b3949ded0eec68ef8385424897fd4786

  • SHA256

    3322d251af320c0be964869e6e2dfba23181f7cce97a15507015df82ed3d4087

  • SHA512

    a5c2326e8954c216924f00034628d7298ecb4178c4a1bd5c77bb1b9b33412c6fb7480eaae51eacb4e6e2efa891f2906581330a8f3482ffe547d53c5e55e7339d

  • SSDEEP

    192:MArl/uA7W/d1UR+WgMbwJFCNieLqaC9oDPlksMR/cLlbb+aR9nsVVImyx5+vtte:9/KQRpNGr9oDPlMNcLlb5sVKmyx5Ct

Score
10/10
stealerguestrevengerat

Malware Config

Extracted

Family

revengerat

Botnet

Guest

C2

127.0.0.1:4444

127.0.0.1:1337

192.168.1.3:4444

192.168.1.3:1337

192.168.137.1:4444

192.168.137.1:1337

192.168.1.2:4444

192.168.1.2:1337
Mutex

RV_MUTEX

Signatures

  • RevengeRat Executable 1 IoCs
    stealer
  • Revengerat family
    revengerat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3322d251af320c0be964869e6e2dfba23181f7cce97a15507015df82ed3d4087
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections