Extracted

• • Target

    ce4e043b1571a8163a225c727eb06d70N

  • Size

    952KB

  • MD5

    ce4e043b1571a8163a225c727eb06d70

  • SHA1

    799c8a23aa61d4f161022d0d55065e3e1eeb4842

  • SHA256

    64ac6d998a2885d619be9c8a5c9cd3d6962bd101035b41a21d8bd10a1f63737b

  • SHA512

    57f22fcf99517753d1fafe55d0b923e3691050630d3de128c72c6c94ee36e0d91b6dc5ae4a9db2fac5cacd6dfe460dd37a5b04a75d4eacb286b58c9a7bdecdd8

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5l:Rh+ZkldDPK8YaKjl

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2