Overview

overview

10

Static

static

10

f7e5decb2c...18.exe

windows7-x64

6

f7e5decb2c...18.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f7e5decb2c3b5d592cd580ed8d68aa23_JaffaCakes118

  • Size

    16KB

  • MD5

    f7e5decb2c3b5d592cd580ed8d68aa23

  • SHA1

    049e7eebd677ec5bebae0545cfa6161ab392c8c0

  • SHA256

    b523a7038662d534bd80af942685562a66e6364bf0fbf68aecf9f1131363543d

  • SHA512

    ce1e896453e10b1dc71bf6bd974caffdebb6cd37f616b6737e3fc530df20d1f3f0d22f90b7daa226db0dfe06c9d298d130448ef9cd3a006c689e01dbe31a54b9

  • SSDEEP

    384:dMRFaXOq9VxP+uGz9muhNculb5sc/Oy5h5Ct:dMRFaXOq9VERwuhNfVho

Score
10/10
stealerguestrevengerat

Malware Config

Extracted

Family

revengerat

Botnet

Guest

C2

0.tcp.ngrok.io:19356

Mutex

RV_MUTEX

Signatures

  • RevengeRat Executable 1 IoCs
    stealer
  • Revengerat family
    revengerat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f7e5decb2c3b5d592cd580ed8d68aa23_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections