Extracted

• • Target

    f30e56e3c98901a3d11aa99e83cefaad313b0e171f3513a459bd2d93ffa397bd

  • Size

    952KB

  • MD5

    370e29dbb25208a13c93e9ee9e71b572

  • SHA1

    af0dd5c593b65af89cd63588d06c10cd1ed7771a

  • SHA256

    f30e56e3c98901a3d11aa99e83cefaad313b0e171f3513a459bd2d93ffa397bd

  • SHA512

    12d9117141a9e83d0758174dbb188deaccf16afd62319a6c9f2fc2cef0010fc5078624a93140282348be7133995bfab801883b901ad7359bea0c9b3093a5fc2f

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5S:Rh+ZkldDPK8YaKjS

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2