Overview

overview

10

Static

static

10

0941a45e94...69.exe

windows7-x64

3

0941a45e94...69.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_8a7230ab2abd3f810c1ffd73f94aa107c917a10d2888d8f180ba50ced7b11665

  • Size

    7KB

  • MD5

    fc60c98a6c3d6ab1fd342a0162aba29b

  • SHA1

    a56594e84e16699d26f744bb6b63e41a5d95600c

  • SHA256

    8a7230ab2abd3f810c1ffd73f94aa107c917a10d2888d8f180ba50ced7b11665

  • SHA512

    861906e7102299a2295bc6438755934510b6db47478d80569dcfdfe9e60a4bce6a236e5a6e3e2add273501f820f6be6ecfbc7354496feda7a38120ca24c30fb8

  • SSDEEP

    192:CZXFJv6cHWHDSO0K34xecXrEvnr9cODM2rP9vz:CZ1JSLJp3c/ODMq9r

Score
10/10
mr_ahmedrevengerat

Malware Config

Extracted

Family

revengerat

Botnet

MR_ahmed

C2

lapoire3.hopto.org:333

Mutex

30ebdfdbdedb437e914

Signatures

  • Revengerat family
    revengerat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_8a7230ab2abd3f810c1ffd73f94aa107c917a10d2888d8f180ba50ced7b11665
    .zip

    Password: infected

  • 0941a45e948795bd86664743b6c92f4abb0a55655ea22c48e75dcfd479ecac69.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections