Extracted

• • Target

    288079ae63c2a33fdf5669fb1480e3c0N

  • Size

    952KB

  • MD5

    288079ae63c2a33fdf5669fb1480e3c0

  • SHA1

    34ea03e00d8acd939e95c5dd9652f122156a7964

  • SHA256

    e9b95c6a2b1b0e7807c642af5d8b712bbe3245788b04307fda3ae9f0f2fd00f2

  • SHA512

    874cb72cc7d12f9710435192ceabd4f3a3c04715fe4da4643b1c2d34874e81ac334ca7029c0c4ab000cce2ca3c138bed3569b4c29586acbebdc2fc46579d0f47

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5J:Rh+ZkldDPK8YaKjJ

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2