Extracted

• • Target

    3b94cb9608e14e8e22baaeeedcef56e0N.exe

  • Size

    952KB

  • MD5

    3b94cb9608e14e8e22baaeeedcef56e0

  • SHA1

    0fc9102868ebee98d76d135fc2d9d6e7c3c63ffc

  • SHA256

    5a2bf459af941997540db2b486aead0666e0acc452d8e088cc1b2d6e55554243

  • SHA512

    7c65a9bc632f8a877f71e88a895870214e93886a558575a9e38741d8e411341b1e45188ffdbdeb20cb0ea3b10edb7526b781e1776cc0de47abb2a12ee8e6ece2

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5k:Rh+ZkldDPK8YaKjk

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2