Extracted

• • Target

    b0c576cf09e488567706dbd30557c4a0N.exe

  • Size

    952KB

  • MD5

    b0c576cf09e488567706dbd30557c4a0

  • SHA1

    e045dae28b871d146c22ae9961373004a3eb8df3

  • SHA256

    65293c2c729505eba8687c9ecf86f4cfac6733fb1ee9865cb3203be59a3c7bc5

  • SHA512

    f1ec25b9f967f3838e04c45fe4e80d61722d74c71d2dcb4e2c66afa9680377079bf02e27f3d28b08cb1bbe621c11956ff591b03488b9102e5d2e7293ef39edad

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5w:Rh+ZkldDPK8YaKjw

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2