General

  • Target

    5d09b83ba59feded0adba9f74ff4a741040e9bcf070bce9be36f33b33ff8c636N

  • Size

    19KB

  • MD5

    c1dab232f8dbb8110b7242f1d9a749d0

  • SHA1

    8c8edf5bfbbbd90b1d6288d2ec5088d0d5af5173

  • SHA256

    5d09b83ba59feded0adba9f74ff4a741040e9bcf070bce9be36f33b33ff8c636

  • SHA512

    c0fe4bf8b2ae85338209fcb0a7bff2c3eb93ed603592c417034aa854a03f47a1c1287ec188960f2c7f8a8efbe9b2a856d2f5207d9c6db090674daa5616b6c650

  • SSDEEP

    384:a6BWG5KPOCPe90EZ2Yp8qb7sVK5ywur2534:ayWG5sOYgr2YRDU2h4

Score
10/10

Malware Config

Extracted

Family

revengerat

Botnet

nn01

C2

95.140.125.85:248

Mutex

RV_MUTEX

Signatures

  • RevengeRat Executable 1 IoCs
  • Revengerat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5d09b83ba59feded0adba9f74ff4a741040e9bcf070bce9be36f33b33ff8c636N
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections