Behavioral task
behavioral1
Sample
3dd73fb50f8947643c7e4356e14cba92.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3dd73fb50f8947643c7e4356e14cba92.exe
Resource
win10v2004-20250314-en
General
-
Target
3dd73fb50f8947643c7e4356e14cba92.exe
-
Size
16KB
-
MD5
3dd73fb50f8947643c7e4356e14cba92
-
SHA1
bd02267a04c323e87c37884ac26fd1213611f306
-
SHA256
fd070899107cd15d65e14aa61343de0893a47dfdedb0911167ad1df8db54f01e
-
SHA512
5860f27047c8149c50549ecbdc973d1bde6f4e9a0379ad679ff8204647654bbaae7b33747c3db8e771913f31a8b2c5d3e01bac2b51397caa6181e295c2fdbf65
-
SSDEEP
384:IBFVK58y3CtNNLTnIX9oDPlMNcLlb5sVKZyI5Ct:YFVK5nStN1kclMNEDo
Malware Config
Extracted
revengerat
Guest
193.161.193.99:1194
RV_MUTEX-VawrHJfWfhaRCl
Signatures
-
RevengeRat Executable 1 IoCs
resource yara_rule sample revengerat -
Revengerat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3dd73fb50f8947643c7e4356e14cba92.exe
Files
-
3dd73fb50f8947643c7e4356e14cba92.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ