Extracted

• • Target

    2fd9820c672809a4c94ee8d29fc2c140N.exe

  • Size

    952KB

  • MD5

    2fd9820c672809a4c94ee8d29fc2c140

  • SHA1

    57a5cf4ddea061714722b9bfc16aed96b7376ca3

  • SHA256

    c22ff8107ae7e1a3ee82f6bdd5b00fed5324f1d7244558ac298c930577e307ef

  • SHA512

    e7b85dfdf140d7ce74e3abd2cb0da2d977d7dda4422e02db798d894491e2c4ff147e9a9b61895448b0ce73a27b833fe17af95d556346eefd5ecdc22ae2e0bd8a

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT57:Rh+ZkldDPK8YaKj7

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2