Extracted

• • Target

    2366be3ec6fd6b00bc09fcfdaff7316174a0cc5ecf2df37a0cbba96d565fb747N

  • Size

    952KB

  • MD5

    e663ccd3d034fe9a01bae21ffcbab7c0

  • SHA1

    865fc5ffdffb437edffac65aaa023f1eefb4b0c1

  • SHA256

    2366be3ec6fd6b00bc09fcfdaff7316174a0cc5ecf2df37a0cbba96d565fb747

  • SHA512

    d00a7226db329153f407cba96415fb87ccc2acaf4eecd36d423a74283878143f5ba636b3835c6d113d4bf3691f36c94f723781cfe853f1ace7c075726e8b1a38

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5+:Rh+ZkldDPK8YaKj+

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2