Extracted

• • Target

    8e091cff31af5837e40b1b84003b4b00N.exe

  • Size

    952KB

  • MD5

    8e091cff31af5837e40b1b84003b4b00

  • SHA1

    5e07abc2a12f6a76ee9724fdbe06792656f8244f

  • SHA256

    b0d5dfd237beea6c4ab37642009914c9fcab8307d159e0676e0edac326e393a6

  • SHA512

    a7697346cda94823286536cfcea5e82d9d10b83bb9ab863294340718e3d82335c91cdc4abd54c4581fb0dcb235d1f302a85586a48be2197eb10d9bb74ae249bd

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5B:Rh+ZkldDPK8YaKjB

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2