Extracted

• • Target

    390f7f14416f923de4e4db41a50fc61463495ce313a638bd36d66ba3f961cfb4N.exe

  • Size

    952KB

  • MD5

    2f58fd678e55f201e43fd6e2b9268e50

  • SHA1

    7f766085b5fd13eb30f904358ff3ae9a4056d3c1

  • SHA256

    390f7f14416f923de4e4db41a50fc61463495ce313a638bd36d66ba3f961cfb4

  • SHA512

    a6e2a7149c94a873700e5d6f692a54bed2975e404dfa80323c25450ac20c259902d7ef1648ea83fa1012ee83beed117c5deb8468c51af571f7c3c0091206e929

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5V:Rh+ZkldDPK8YaKjV

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2