Extracted

• • Target

    d6777ac915e9ff0e6b830b3c3f3674f0N

  • Size

    952KB

  • MD5

    d6777ac915e9ff0e6b830b3c3f3674f0

  • SHA1

    e3cf3358487a219997030a9323156db6ac899051

  • SHA256

    fcbcaf575d28561dd1c4a785591884272c7b2ba55e53cb69905e68b7f8a4373a

  • SHA512

    78459453b9cbf9feb323d5cd3d5a036c6c945e906240284cabfe122c84cd2d2be1a8851230d56522714692cf474f8d26ed59bdc15f21eb6a87b8eec6ccbda7fe

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT55:Rh+ZkldDPK8YaKj5

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2