Extracted

• • Target

    fbb0dce563b485904a093fc8e8c262b18820002557a0b140a236fcac6e6f5212

  • Size

    952KB

  • MD5

    c79ab0cb34444ca347aebccbfc744b51

  • SHA1

    f992a0c9dfb63db7e47fb1cde579570cd3b8806d

  • SHA256

    fbb0dce563b485904a093fc8e8c262b18820002557a0b140a236fcac6e6f5212

  • SHA512

    1ea8a90dee118cd06ca2c404da8c37d00ceb00e57f0683fc3519b8058f4ecd301d26c5c28d072b29021c84c9407a9db4d1591673560c9a67affa4605e54289b2

  • SSDEEP

    24576:2AHnh+eWsN3skA4RV1HDm2KXMmHaKZT5+:Rh+ZkldDPK8YaKj+

  Score

  10^/10

  revengeratmarzo26discoverytrojan

  • RevengeRAT

    Remote-access trojan with a wide range of capabilities.

    trojanrevengerat

  • Drops startup file

  • AutoIT Executable

    AutoIT scripts compiled to PE executables.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2