Extracted

• • Target

    Trojan.Win32.Nanocore.NE.MTB-7b4426ad62bacffa8db5083f6a5d7ef607e2ad42b69d33d1cfe3e82d1602fa06N

  • Size

    952KB

  • MD5

    981eb7320c56ca6ae701ceb3dac4aef0

  • SHA1

    582ee40d2e6e6d48d319ba9e6a4055c98ef164b2

  • SHA256

    7b4426ad62bacffa8db5083f6a5d7ef607e2ad42b69d33d1cfe3e82d1602fa06

  • SHA512

    660233b434c5e6a00acf146dfd2c35bd47e97421993684804b8ffc2e640f164235cfd4cd49bf317031ece74288c049d3e379b21e3b8d2a58dc46a43789153965

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT59:Rh+ZkldDPK8YaKj9

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2