Extracted

• • Target

    VirTool.Win32.AutInject.pz-465c6eaef68264632e0f5cdc0d78e946388e866de9ac5417dcf082b81219a653N

  • Size

    904KB

  • MD5

    0efcad820d14c26bbcd9bea072a068f0

  • SHA1

    b0a5afceba9d66a4941e5e93df067064d6a59be0

  • SHA256

    465c6eaef68264632e0f5cdc0d78e946388e866de9ac5417dcf082b81219a653

  • SHA512

    3408bf3029b703641456d8b0a26dcdc3fb2838aaf9984974dd4b9a9e1e783b7bd52c15122c617e9ebbe441dc515de91ebfc2de6cd4e093dea63f037185be2b41

  • SSDEEP

    24576:ZAHnh+eWsN3skA4RV1Hom2KXMmHaKZa5A:gh+ZkldoPK8YaKGA

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • Suspicious use of SetThreadContext

  behavioral1behavioral2