Extracted

• • Target

    Trojan.Win32.Nanocore.NE.MTB-a40e1375e5c16ea1f16e16bb2c4560c52d7be207688fd4fc60de66755719b8b7N

  • Size

    952KB

  • MD5

    b24f29b5f18bc09ee85708ce5467a4b0

  • SHA1

    adc1a449fa20babd11c60268db4d7c9dae4470ed

  • SHA256

    a40e1375e5c16ea1f16e16bb2c4560c52d7be207688fd4fc60de66755719b8b7

  • SHA512

    0e778993acc97bb34ad0f67c952be4c1ef2b1d9648dcbabf35b9ca834531555bfcb307809a3a94046e2a9b7c5ae700286715bd9ff362147dc9bdca342146bcf0

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5Y:Rh+ZkldDPK8YaKjY

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2