Extracted

• • Target

    ef384a13d046c349eb4b8bcaa8533e0fdac9abedc9547914ff7baf8a9e898b86

  • Size

    952KB

  • MD5

    09b72d1bd9e4dcc336a4d8c5d1d58bf8

  • SHA1

    fb8aa642cd16ebe2bf40ccdb97fc4ef399b7712b

  • SHA256

    ef384a13d046c349eb4b8bcaa8533e0fdac9abedc9547914ff7baf8a9e898b86

  • SHA512

    4f9c3e21625b6148ea0d2836394578b31ac15452a60360fd4aaece3017c1b5a7b28d5b047878451f7779afff09d0c09c888f89d5627c4735361b0553c2a74b78

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5H:Rh+ZkldDPK8YaKjH

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2