Extracted

• • Target

    a6f950621e3e2a72548eda269e6717b4675afd429874fb8be905248907c79db9N

  • Size

    952KB

  • MD5

    0af4c51d7d5448f77b9294a1ab79d890

  • SHA1

    b6a54b072ae64d1bcb4b689fa06df4b3229e5958

  • SHA256

    a6f950621e3e2a72548eda269e6717b4675afd429874fb8be905248907c79db9

  • SHA512

    9c2af09a154160747ac43ab07fafddf8269d68ad2d69bdb25488867102088332bf3bf0c40317f7be2e1e74b939cfa187820f61a71ed4fbf7df382ed275c140df

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5K:Rh+ZkldDPK8YaKjK

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2