Extracted

• • Target

    2b48af6842188c2fe80cad318dcb45f1d313c6f3f5abb80503cb1d3042c0404e

  • Size

    951KB

  • MD5

    024ceef11a6307a613e5fbd96cd467c5

  • SHA1

    19edde81f3a75e1bed4dc9aa8a1aaea15f58a3c2

  • SHA256

    2b48af6842188c2fe80cad318dcb45f1d313c6f3f5abb80503cb1d3042c0404e

  • SHA512

    430a38ed512bae89eb92574c5528204a878a8d53c37f5bf5c906931787d03d702dc994d0e58e904c8f5c5239840b568dae86a0c09c1101d48c92bb4bf5af172f

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5i:Rh+ZkldDPK8YaKji

  Score

  10^/10

  revengeratmarzo26trojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2