Extracted

• • Target

    284c7b82974153ac8ce3446a7fcf8066b33461f1fd2d9a208ac2044bd6a82f2c

  • Size

    89KB

  • MD5

    d2795c4e6e194ff9fbb3d955a08fcc62

  • SHA1

    e83b67e85e3a43d52958f9a1e3990c458f874f18

  • SHA256

    284c7b82974153ac8ce3446a7fcf8066b33461f1fd2d9a208ac2044bd6a82f2c

  • SHA512

    7c0b474b4b473b852a52ad9aca23e32c99238182fb2cbbcb4f5a2db17d46ad61d53041cd7a0ee6fdab76abe83bd45b06546131b80ad4280f8086a9e54cc154e1

  Score

  10^/10

  revengeratgueststealertrojanpersistence

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • RevengeRat Executable

    stealer

  • Executes dropped EXE

  • Drops startup file

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2