Extracted

• • Target

    3215e7132c96a5fd13fdb2b30a604a29841565b9c4ac370375fd2ed7e2ec9801

  • Size

    952KB

  • MD5

    f5ae123ea644738640296c21687c2946

  • SHA1

    e705b069ef24128ff27b16c43c8044a978725731

  • SHA256

    3215e7132c96a5fd13fdb2b30a604a29841565b9c4ac370375fd2ed7e2ec9801

  • SHA512

    0ebd86972a5efd88b7ea2cdc3ce0c5604417512888bb23f3023b2225bc0bfcad610e8f8753255124298d842ea8f30078b1ccca453f78cf60382336c082e13561

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5s:Rh+ZkldDPK8YaKjs

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2