Extracted

• • Target

    fa48ae9eb717688121a0bc0776e41f0cbbd7e531c697148d7ffb22adf60d991d

  • Size

    951KB

  • MD5

    2d5e90f56c152fe7b94e60e83602a3b1

  • SHA1

    17cf175e7c9963f514ca31d39daed223dc261ade

  • SHA256

    fa48ae9eb717688121a0bc0776e41f0cbbd7e531c697148d7ffb22adf60d991d

  • SHA512

    3674741e078e39dffdbb9cc0e30119ed39bc53f6429740740a1c75a6ffb32323309b2893929852d203022dfd5a2ddbb242c844d658d778e37236432b06e0d5c3

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT59:Rh+ZkldDPK8YaKj9

  Score

  10^/10

  revengeratmarzo26trojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2