Behavioral task
behavioral1
Sample
0f0ad0df89b895ae4e7ad72b7d6bbea015fe566fe98b577553cb95cd3fb96766.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f0ad0df89b895ae4e7ad72b7d6bbea015fe566fe98b577553cb95cd3fb96766.exe
Resource
win10v2004-20240802-en
General
-
Target
0f0ad0df89b895ae4e7ad72b7d6bbea015fe566fe98b577553cb95cd3fb96766.exe
-
Size
16KB
-
MD5
cd7ded7b1aa84a3f1e9312b8eeaf8391
-
SHA1
5c632f75441189c396dd24fe3e353dc1bb8ac7b5
-
SHA256
0f0ad0df89b895ae4e7ad72b7d6bbea015fe566fe98b577553cb95cd3fb96766
-
SHA512
d7b436e58a56ebe30d5e4ffe5e67c88e430c3c091ba951e5b057daea0233f314da23926fd0a542645547a01ccd0610da88e92d35f84cfd3217d613a4a8967f8c
-
SSDEEP
384:SDmPni19PBDdd79oDPlMNcLlb5sVKkyr5Ct:SDmPni19N3clMNEvo
Malware Config
Extracted
revengerat
Guest
127.0.0.1:5555
RV_MUTEX-QZblRvZwfRtN
Signatures
-
RevengeRat Executable 1 IoCs
resource yara_rule sample revengerat -
Revengerat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f0ad0df89b895ae4e7ad72b7d6bbea015fe566fe98b577553cb95cd3fb96766.exe
Files
-
0f0ad0df89b895ae4e7ad72b7d6bbea015fe566fe98b577553cb95cd3fb96766.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ