Extracted

• • Target

    adb4af7dba4088dc221fc6671d84bf33229248872de5f7f6b333d991b3fff38f

  • Size

    952KB

  • MD5

    8df00f84395a04cd855d8ff1be5efb93

  • SHA1

    dd27b6f4c196dac5ccc9fdd99eef5805120d907e

  • SHA256

    adb4af7dba4088dc221fc6671d84bf33229248872de5f7f6b333d991b3fff38f

  • SHA512

    7e894a31a2243721611ac79245b63f2bc1e0a138d1b6743c94f6aefd683c3d5332e226410cc3cefc3299feb78e6524d7dbd88e8df411167bec002c990ec25905

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT50:Rh+ZkldDPK8YaKj0

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2