Extracted

• • Target

    bb0d10b48b2e9342a27a09e8e317e46239bdf71fd3588da8da243ccc511bc53c

  • Size

    952KB

  • MD5

    6a17862df43f77c3b42776de497c1166

  • SHA1

    d088d240d3fbfcc1562a78488f089cc5e9359b96

  • SHA256

    bb0d10b48b2e9342a27a09e8e317e46239bdf71fd3588da8da243ccc511bc53c

  • SHA512

    114d95d4881c2fa83781d32bfa04a7587beee5fa0d0d89a8fae7cd1d10b44a68afee558cc1adb26a37ccc3c7d59639bb68f508661adc2619c77380e143d345b5

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5E:Rh+ZkldDPK8YaKjE

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2