{"id":"7310548654a0e1bd553ae65d58701160","title":"RevengeRAT — RevengeRAT · 木马/恶意软件 · PE32 .NET","md5":"7310548654a0e1bd553ae65d58701160","sha256":"e54384fe872d30bf574d7b80311ce1c6d9f86a8db7b6e47cbd03069eea1bdd61","family":"RevengeRAT","apt":null,"verdict":null,"sample_type":"木马/恶意软件","lang":"C#","file_format":"PE32 .NET","compiler":"VB.NET","published_at":"2020-02-24T16:00:00.000Z","summary":"该样本被 DIE (Detect It Easy) 识别为 RevengeRAT 0.3 变种，使用 VB.NET 和 .NET Framework 2.0 (CLR v2.0.50727) 编译。 编译于 2020-02-25 18:07:01，大小 16.5 KB。 RevengeRAT 是知名的商业化远程访问木马，功能包括: 远程桌面控制、文件管理、进程管理、注册表操作、键盘记录、密码窃取、屏幕监控等。 该变种使用 CodeDom Compiler 动态编译技术，可能用于绕过静态检测。 SHA256: e54384fe872d30bf574d7b80311ce1c6...","url":"https://zseceye.com/report/7310548654a0e1bd553ae65d58701160","json_url":"https://zseceye.com/report/7310548654a0e1bd553ae65d58701160.json","html_url":"https://zseceye.com/report/7310548654a0e1bd553ae65d58701160","hash_urls":{"md5":"https://zseceye.com/hash/7310548654a0e1bd553ae65d58701160","sha256":"https://zseceye.com/hash/e54384fe872d30bf574d7b80311ce1c6d9f86a8db7b6e47cbd03069eea1bdd61"},"search_urls":{"md5":"https://zseceye.com/?q=7310548654a0e1bd553ae65d58701160","sha256":"https://zseceye.com/?q=e54384fe872d30bf574d7b80311ce1c6d9f86a8db7b6e47cbd03069eea1bdd61"},"sample_download_url":"https://zseceye.com/report/7310548654a0e1bd553ae65d58701160/sample","sample_filename":"e54384fe.zip","iocs":[],"ips":[]}