Extracted

• • Target

    5c8cdcd1ffc21547d469611f4e328c6dd58c36c252e9ae1e6fca4a25a7d3f66a

  • Size

    952KB

  • MD5

    90a7699595a50319c3d84a913ce08099

  • SHA1

    8a50d1b7d29f9e6ceccd422bfa284d91cc834b14

  • SHA256

    5c8cdcd1ffc21547d469611f4e328c6dd58c36c252e9ae1e6fca4a25a7d3f66a

  • SHA512

    3d37daa52d3d952d95ce3035a11fe52de55d037a817c51e043d17c847736fd1109fae1ea4c5a3e937ee5f16ca0f0b638447223ac323bbf48ff6dc3ce64460e85

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT53:Rh+ZkldDPK8YaKj3

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2