General

  • Target

    30ef3d46a266114674f601d9d03f85029ec54821f104b9e86903113d47914b6f.exe

  • Size

    14KB

  • MD5

    bca1732514ba5fd310c6a44c9d2127f1

  • SHA1

    8cb6a119cbb331d75ce5a570057df5c2d033c53d

  • SHA256

    30ef3d46a266114674f601d9d03f85029ec54821f104b9e86903113d47914b6f

  • SHA512

    a7444b275ad3ad377e4f90bf1b6f064620e1e7b7f96c9b348a0506d009fb31e31ceffdee14ae85cc44fac4744010901a3139b309289ef1bda9a37765e5d7cabc

  • SSDEEP

    192:9+8C+EKS0O9ejYTDG8bcp4LlxanieXubWyD9JEBkGxVXAqoNYRJw:9NVjYTDG8gpcBeXTyD3EnxvoNr

Malware Config

Extracted

Family

revengerat

Botnet

NyanCatRevenge

C2

helpdeskcamfrog.ddns.net:2222

Mutex

93e175d528

Signatures

  • Revengerat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 30ef3d46a266114674f601d9d03f85029ec54821f104b9e86903113d47914b6f.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections