Extracted

• • Target

    Trojan.Win32.Nanocore.NE.MTB-73312d84f0b8f9230d95e26779b1a3e8d5c7b8aa7fcee0a92ce9cec15670e153N

  • Size

    952KB

  • MD5

    f1c3cedaaaefc1af7cb05ba77d90ae80

  • SHA1

    88f662967b26190dacb79dfa2fa02e0e1c2b8293

  • SHA256

    73312d84f0b8f9230d95e26779b1a3e8d5c7b8aa7fcee0a92ce9cec15670e153

  • SHA512

    215bf457a7722271d68d60093f4686e24d714295e8319fb52fb79738a5c2fdc620f8c50d7c9cf4f36fa46aeb71d64ab640d6a6920973baafa5025154e89b8005

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5j:Rh+ZkldDPK8YaKjj

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2