General

  • Target

    3dd73fb50f8947643c7e4356e14cba92.exe

  • Size

    16KB

  • MD5

    3dd73fb50f8947643c7e4356e14cba92

  • SHA1

    bd02267a04c323e87c37884ac26fd1213611f306

  • SHA256

    fd070899107cd15d65e14aa61343de0893a47dfdedb0911167ad1df8db54f01e

  • SHA512

    5860f27047c8149c50549ecbdc973d1bde6f4e9a0379ad679ff8204647654bbaae7b33747c3db8e771913f31a8b2c5d3e01bac2b51397caa6181e295c2fdbf65

  • SSDEEP

    384:IBFVK58y3CtNNLTnIX9oDPlMNcLlb5sVKZyI5Ct:YFVK5nStN1kclMNEDo

Malware Config

Extracted

Family

revengerat

Botnet

Guest

C2

193.161.193.99:1194

Mutex

RV_MUTEX-VawrHJfWfhaRCl

Signatures

  • RevengeRat Executable 1 IoCs
  • Revengerat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3dd73fb50f8947643c7e4356e14cba92.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections