Extracted

• • Target

    13ba9fa72b98238d3cff27abd626ea64264a09e61e2b13d56db940ec245c826fN

  • Size

    952KB

  • MD5

    417042ad938eeedbdab2a56508e90e40

  • SHA1

    77eef26d4f3ed4eb90a50552343a62862296342a

  • SHA256

    13ba9fa72b98238d3cff27abd626ea64264a09e61e2b13d56db940ec245c826f

  • SHA512

    0b3ffaf186ebb30c9725e71e360a8e43694127b8d0105a1dcff08476d34a2b2b57b0c2a3eda1913c091064e3ef288c1352b74c76eb1410a188457af702913e40

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5d:Rh+ZkldDPK8YaKjd

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2