Extracted

• • Target

    https://www.mediafire.com/folder/fcwh6mfc7yvnf/EMAILSOFTWAREMaksim

  Score

  10^/10

  revengeratnyancatrevengepersistencetrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence
  behavioral1