Extracted

• • Target

    5ef1871dd30bb0ccad3c26b3f41094cd441683b4349e3606800d45f8a51db1eeN.exe

  • Size

    952KB

  • MD5

    2b5de0dec900f2b9083de75a342efee0

  • SHA1

    0d8acaabd51ea37a9b0cc700fa8dfba60dfa818c

  • SHA256

    5ef1871dd30bb0ccad3c26b3f41094cd441683b4349e3606800d45f8a51db1ee

  • SHA512

    815fef730da95582e414caaf4f37ff6bf83b0eaf5d6496c3f4535bcf24765791f30935ee7727b300a7681d31a603f5fdd9955c342b08a42474d60727803ce314

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5B:Rh+ZkldDPK8YaKjB

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2