Extracted

• • Target

    9cd029bb2a0fad66d57e65f58cf007af09d9c98a43c7e468cc3f4c312ec876caN

  • Size

    952KB

  • MD5

    b640222115363b41788d97eb3ac7ed90

  • SHA1

    9b4892a19349003374aa4865b9af59f2fcedb8e3

  • SHA256

    9cd029bb2a0fad66d57e65f58cf007af09d9c98a43c7e468cc3f4c312ec876ca

  • SHA512

    f3bcedd6dbf999ed1ccc1a096eb533ff35e0ad631fe1c922c567ebebfb2f6cd3b8c50d49920188d42231bb46d8f678e379abc82b0cbece967303842c62e5fcf2

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5P:Rh+ZkldDPK8YaKjP

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2