Behavioral task
behavioral1
Sample
d9ce6a57571c59afdacdd5830c9e3854d850587504eb3d1110a9cdfef6518c7fN.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d9ce6a57571c59afdacdd5830c9e3854d850587504eb3d1110a9cdfef6518c7fN.exe
Resource
win10v2004-20241007-en
General
-
Target
d9ce6a57571c59afdacdd5830c9e3854d850587504eb3d1110a9cdfef6518c7fN.exe
-
Size
16KB
-
MD5
2b99fb51c30b1686ae0647397b6b7b10
-
SHA1
55ce0a8d836a9e5ad2a7a5632e962a59ea4e501f
-
SHA256
d9ce6a57571c59afdacdd5830c9e3854d850587504eb3d1110a9cdfef6518c7f
-
SHA512
cc7f791e7c431e5f9c06062e7afdb1387d461af97633b0d1df408236db8baf4860c8f636ecec8c87ed17368233cf6e5f431e75588109226d2e92d29e23876bd4
-
SSDEEP
384:J5iFakqtlpn6qj4T9oDPlMNcLlb5sVKfyN5Ct:J5iFPqtlwqsclMNEEo
Malware Config
Extracted
revengerat
Guest
networks-soup.gl.at.ply.gg:58082
RV_MUTEX
Signatures
-
RevengeRat Executable 1 IoCs
resource yara_rule sample revengerat -
Revengerat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9ce6a57571c59afdacdd5830c9e3854d850587504eb3d1110a9cdfef6518c7fN.exe
Files
-
d9ce6a57571c59afdacdd5830c9e3854d850587504eb3d1110a9cdfef6518c7fN.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ