General

  • Target

    117f6677eb682b7d088ad3acd3ef26250a4fb03f366c5c53e44d425a82a89db8N.exe

  • Size

    17KB

  • MD5

    528b08140fe6e17d064a627982522b60

  • SHA1

    943bbd088a257cf367ec368b976f4ca0459b88e5

  • SHA256

    117f6677eb682b7d088ad3acd3ef26250a4fb03f366c5c53e44d425a82a89db8

  • SHA512

    a69f23e3ec4c72cee32e0497cf061ed415724b7e164836d1a2d545527e066693eed2d804bdf9870cbd838c756efc8540504f3ebae089d905da06b1fc1d20acdc

  • SSDEEP

    192:LaDFitXkdCaRXz5MvsgzJF7Y9/tuLvzy+bDPDtJZqMeDaRzu6bh+aF9nsVVIP2e1:2DAtXmUhc/tu6+F3Du6bTsVKP1y87q9m

Malware Config

Extracted

Family

revengerat

Botnet

DxH_Spcial_Hack

C2

mralaa1.myq-see.com:9292

Mutex

RV_MUTEX-RZblRvZwfRtNH

Signatures

  • RevengeRat Executable 1 IoCs
  • Revengerat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 117f6677eb682b7d088ad3acd3ef26250a4fb03f366c5c53e44d425a82a89db8N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections