Extracted

• • Target

    Trojan.Win32.Nanocore.NE.MTB-3784b7467ba7f95db0999d3700206d7385acc0aa283ec2c7b73c45224eafc3b8N

  • Size

    952KB

  • MD5

    dafc300b577318fa79d83453ce023b50

  • SHA1

    856898a54365675b2b4c106d256938f6425c1d6d

  • SHA256

    3784b7467ba7f95db0999d3700206d7385acc0aa283ec2c7b73c45224eafc3b8

  • SHA512

    b4f2b504bea52569a45beddeb5e356fb9ae42c76a39e45b616c6929bb8f6dd69533343567f1b278b135cce7f7d9c050b002ded4b8c75a6df80872adcbbec7623

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5c:Rh+ZkldDPK8YaKjc

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2