Overview

overview

10

Static

static

10

e0ee27afb4...18.exe

windows7-x64

6

e0ee27afb4...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e0ee27afb4f7265a4d4459db6a4d6c04_JaffaCakes118

  • Size

    16KB

  • MD5

    e0ee27afb4f7265a4d4459db6a4d6c04

  • SHA1

    22f327c88557888de0e3051b803574b36b165f39

  • SHA256

    56e5859ed8dc27386e209b3cd4959be7c76c33b0b59deb8e4449cf23e99d4cbc

  • SHA512

    664d38c7fb0dc768c8d06d454383cf0a85238bc2d68250d9ec9bbc52da7d2d0c4ea8919df5cfc53808ae7e2f41e8415aaa7812823cb9d71fa3d616ca12061bec

  • SSDEEP

    384:r2ZilPqtlJES8ur9k4NcKlb5suLUyp5Ct:r2ZilPqtlFrlNzpo

Score
10/10
stealerparrot-securityrevengerat

Malware Config

Extracted

Family

revengerat

Botnet

PARROT-SECURITY

C2

3.tcp.ngrok.io:24041

Mutex

RV_MUTEX-GgZblRvZwfRtNHu

Signatures

  • RevengeRat Executable 1 IoCs
    stealer
  • Revengerat family
    revengerat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e0ee27afb4f7265a4d4459db6a4d6c04_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections