Extracted

• • Target

    Trojan.Win32.Nanocore.NE.MTB-2dfae6c5e1bfd40008a5077e66b4cd24a7adbfbde5e803f46d7bebad5f79e4baN

  • Size

    952KB

  • MD5

    7eda4b3a73a11380c1b510c02700c0c0

  • SHA1

    b30c47e7c1f83e0cba6dfdaa00f2850056809b50

  • SHA256

    2dfae6c5e1bfd40008a5077e66b4cd24a7adbfbde5e803f46d7bebad5f79e4ba

  • SHA512

    8ebcbf85f71d669137bd975119ad6e2f9fe900bd1d7eb762f8fecedd4cbd44abbca9cdd0b3f4d14514b3d998e8d70a9c5dcfe4920f8f6a2a2f54e57f2600e04c

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5v:Rh+ZkldDPK8YaKjv

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2