General

  • Target

    275e4633982c0b779c6dcc0a3dab4b2742ec05bc1a3364c64745cbfe74302c06.exe

  • Size

    101KB

  • MD5

    88dbffbc0062b913cbddfde8249ef2f3

  • SHA1

    e2534efda3080e7e5f3419c24ea663fe9d35b4cc

  • SHA256

    275e4633982c0b779c6dcc0a3dab4b2742ec05bc1a3364c64745cbfe74302c06

  • SHA512

    036f9f54b443b22dbbcb2ea92e466847ce513eac8b5c07bc8f993933468cc06a5ea220cc79bc089ce5bd997f80de6dd4c10d2615d815f8263e9c0b5a4480ccb4

  • SSDEEP

    1536:fkSJkZlpqwZoMoG5XoZnOZBX7D/3BINVRX3FjBqa8D3tSYS9h:MXlpqwZoMz5XoZncB/3BINZjy9SYS

Malware Config

Extracted

Family

revengerat

Botnet

system

C2

yj233.e1.luyouxia.net:20645

Mutex

RV_MUTEX-GeVqDyMpzZJHO

Signatures

  • RevengeRat Executable 1 IoCs
  • Revengerat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 275e4633982c0b779c6dcc0a3dab4b2742ec05bc1a3364c64745cbfe74302c06.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections