Extracted

• • Target

    Trojan.Win32.Nanocore.NE.MTB-077e55a809cb7840b6ea01021c43e1e41bb40219ffe305763bee63247588f49cN

  • Size

    952KB

  • MD5

    34a1432f6e49dae9489e9474d691f750

  • SHA1

    23f487b0efdcef24df049d2c6e823885cf222f8a

  • SHA256

    077e55a809cb7840b6ea01021c43e1e41bb40219ffe305763bee63247588f49c

  • SHA512

    7043484ea2e30996e3e9cb164cea59274f132f2f140cae8870e54d49884a2ad275addb21e0f920e04f4787eeb6d6e7d8066e4899efd1c3f360a64ef1ab771f79

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5G:Rh+ZkldDPK8YaKjG

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2