Extracted

• • Target

    Trojan.Win32.Nanocore.NE.MTBa321c927729152838bc35c5c6bbcda89f2eda9f727ca452c459cf0efe18fe9c4N

  • Size

    952KB

  • MD5

    b58f4a067483a8329079731207d4e160

  • SHA1

    0c9500ea3282af775e8a62b9d3c516828e0f8a14

  • SHA256

    a321c927729152838bc35c5c6bbcda89f2eda9f727ca452c459cf0efe18fe9c4

  • SHA512

    72918c071467dd1b19278483985b3b73dedde9b1aa3e18fad319cb2010fb87c823fdb4e843c176cd020df636cb650a204b49919e95407192199b039ef84dcc15

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5d:Rh+ZkldDPK8YaKjd

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2