Extracted

• • Target

    79d6c9d3791d2bd257dfaca21ed0712a7be2284672d2c5e0e55ac8fb6e63f879

  • Size

    952KB

  • MD5

    8de1d302c93eea8f07dd107dd07c14cf

  • SHA1

    1f9ffcbe99caea0c5cf7c54bd88269c8c131d2b6

  • SHA256

    79d6c9d3791d2bd257dfaca21ed0712a7be2284672d2c5e0e55ac8fb6e63f879

  • SHA512

    8c2eefc0f9958452d5d374fff5e996892191bd65ca3d44f903fc47c79c36a5cfa4acf74fd0b5806ae618dcdce36f9dace91feed7075f908032b8de2921954f7e

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5p:Rh+ZkldDPK8YaKjp

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2