Extracted

• • Target

    Trojan.Win32.Nanocore.NE.MTB-4bd943af6224bf971b3adb1c6d834ca16699b4dc912701712eef53cee09edc2fN

  • Size

    952KB

  • MD5

    0b1ae1581ce480c5a4435801b9f06fb0

  • SHA1

    a0fcda421185dd4a7f78bffe308c3dfa81e3a6b3

  • SHA256

    4bd943af6224bf971b3adb1c6d834ca16699b4dc912701712eef53cee09edc2f

  • SHA512

    c6c320e8fd3e083660696012f3b28e1d939318c0e11ed78c0ce26834d67a85afc7e28e83ce65ae05a6882017453ece3e2ad683c94d26f7ee2d5dc89e01a804e9

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5u:Rh+ZkldDPK8YaKju

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2