Extracted

• • Target
    32654120000.ppa
  • Size 85KB
  • SHA256 924b64652f124bbf235affcb91f62ddd799456c8b7438842c322db64d1a3e4a4
  • MD5 f73d28374566888ca72af46736a044c7
  • SHA1 a4186cef906d11a1af9c064b742449c1ea0dccd5
  • SHA512 c7460d9b69519c206bb553a37f263c178bcfd5b3c1902cd400433248f2e7b01f776c92f8eb6cafd1f11818cd097c22960744d205de73c6649e71f468ef1afc52
  • SSDEEP 768:b2HgyYZ88pJ9lYsI4XrNK7LSdvsqQvb36aTZQSCmYDxB:bXyYZ88RlYsI4XrNKCdvgvb37VQnrx
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  revengeratnyancatrevengetrojan

  • Process spawned unexpected child process

    This typically indicates the parent process was compromised via an exploit or macro.

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Blocklisted process makes network request

  • Suspicious use of SetThreadContext

  behavioral1behavioral2