Extracted

• • Target

    9404e4b97b3c9dfcaf9c1eaf5cb74fb1bfd9d1e97c74c724f6dd7470280b05b2

  • Size

    952KB

  • MD5

    b82dd69a1a42e85cb39f185cd8619a13

  • SHA1

    d4e4c4ee2e5f34d148a6473f070352b51bd21b2d

  • SHA256

    9404e4b97b3c9dfcaf9c1eaf5cb74fb1bfd9d1e97c74c724f6dd7470280b05b2

  • SHA512

    af2f983d06d560acd557a270a310c2910b61b20ca3a1ed13f30a17e4eed3b13f27f65c082ece0c13b93647ebcb60340155df5a8dd37086261e2d441121e04ec3

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT56:Rh+ZkldDPK8YaKj6

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2