Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3f6f7629d1695e4f9856be47877de06352577c82a73034173b2025f1fdb28f58N

  • Size

    17KB

  • MD5

    8fc4d261050634973922791392114520

  • SHA1

    6bb88d6e17af6c024f3693185b252671ee151261

  • SHA256

    3f6f7629d1695e4f9856be47877de06352577c82a73034173b2025f1fdb28f58

  • SHA512

    f533a0a2c2da357f779f5993df41f670597ebbe2b68feba1ecad16b1cd7f3c2e51cf3637c4023cf1151e040a4d09877ff833b2ac3beff50bb53b1873b8110b81

  • SSDEEP

    384:h7mHny19HqmjuqRz9oDPlMNcLlb5sVK9y/5Ct:h7mHny19NjVtclMNEYo

Malware Config

Extracted

Family

revengerat

Botnet

Marzo26

C2

marzorevenger.duckdns.org:4230

Mutex

RV_MUTEX-PiGGjjtnxDpn

Signatures

  • RevengeRat Executable 1 IoCs
  • Revengerat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3f6f7629d1695e4f9856be47877de06352577c82a73034173b2025f1fdb28f58N
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections