Overview

overview

10

Static

static

10

JaffaCakes...67.exe

windows7-x64

1

JaffaCakes...67.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_c7eb71f09f5cf205160a9bb1b064301928ed20017cd2bb9eaf7720466caa4467

  • Size

    20KB

  • MD5

    f7d629a9165ddb871f4d71858858b059

  • SHA1

    d1e43b0754c1e40f2063475f07ef6645f8dc97b6

  • SHA256

    c7eb71f09f5cf205160a9bb1b064301928ed20017cd2bb9eaf7720466caa4467

  • SHA512

    e5035e9139ee6af6075b6f2e86458fdc825e6c86e7cdd95863c278d77d09c9ce84ed25c65313a1d2c87e7e22b576f4cceae24b81d2db50cfe57842d9d0af2c61

  • SSDEEP

    384:KhBmhDkXGvRPJnMyeeZhGbOyqxTXhHMVuDKhCxeEs5Up1ymMF:KLmhD1egpMVxazMF

Score
10/10
stealerclientrevengerat

Malware Config

Extracted

Family

revengerat

Botnet

Client

C2

127.0.0.1:333

127.0.0.1:37337

127.0.0.1:1243

whatelse.us:333

whatelse.us:37337

whatelse.us:1243

nothing.else:333

nothing.else:37337

nothing.else:1243

mothers.lol:333

mothers.lol:37337

mothers.lol:1243

<svg>.com:333

<svg>.com:37337

<svg>.com:1243
Mutex

RV_MUTEX

Signatures

  • RevengeRat Executable 1 IoCs
    stealer
  • Revengerat family
    revengerat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • JaffaCakes118_c7eb71f09f5cf205160a9bb1b064301928ed20017cd2bb9eaf7720466caa4467
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections