General

  • Target

    1ac627e82ba35b497cb35ec5df125e8eadbe49a2f22f6040ff6c0be4af3ca07bN.exe

  • Size

    31KB

  • MD5

    93ad69e2829457e42665857e26ee6ce0

  • SHA1

    d8e24c1a6b5567eba2ed05bcd3f2be5f3ac76013

  • SHA256

    1ac627e82ba35b497cb35ec5df125e8eadbe49a2f22f6040ff6c0be4af3ca07b

  • SHA512

    ec32fb954ab917f61e8c5626af4fad5e46ec487864d459060d21b32e5ebb854d135406955edfcaaeb34e1a0e122839267826a967938e57279ec3e5b0338fb925

  • SSDEEP

    384:IG2mnny19npjllT9oDPlMNcLlb5sVKFyn5Ctj4XuJZwtfXbMpBjSr8f0DBRJPWBz:IG2mnny19tfclMNE8otHw8w1Pm

Malware Config

Extracted

Family

revengerat

Botnet

Guest

C2

127.0.0.1:4444

127.0.0.1:1337

192.168.1.3:4444

192.168.1.3:1337

Mutex

RV_MUTEX

Signatures

  • RevengeRat Executable 1 IoCs
  • Revengerat family

Files

  • 1ac627e82ba35b497cb35ec5df125e8eadbe49a2f22f6040ff6c0be4af3ca07bN.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Code Sign

    Headers

    Imports

    Sections