Extracted

• • Target

    3d20e52a8fa95a3839bb0438bac673b0N.exe

  • Size

    952KB

  • MD5

    3d20e52a8fa95a3839bb0438bac673b0

  • SHA1

    22a5b4a9e812d7f228c02f4e73ca93d70a0f6cf9

  • SHA256

    2ee473a6dfd61f43bbc4fb909667628880fe51228f1adf6988258b917a71c508

  • SHA512

    2bf04ad5dcaad6120a9f3fbea3953e98cb2851939c012e504c1db9ed53aa69651c19cc8a5d2bf1d6355c4f85778148f8907c71447fe1eab149f59312ffd410a0

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5/:Rh+ZkldDPK8YaKj/

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2