Extracted

• • Target

    68db0ca991cff2dd79a7e52ade4f58b172d4c7a643c73837010ff853a860a7b8

  • Size

    952KB

  • MD5

    97c2c46944ad205218ee3bee5ee41586

  • SHA1

    ddf792910899201860bc22c08fe8174990e9e2f1

  • SHA256

    68db0ca991cff2dd79a7e52ade4f58b172d4c7a643c73837010ff853a860a7b8

  • SHA512

    b365af572356915f22d69ac38feade1caddb0f3fdbafacca47537b8e30d6c42f8acf5a594010e7ccc2294bbb74259982e63fd3dc36b186a5a5367d0bfdbde9f8

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT53:Rh+ZkldDPK8YaKj3

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2