{"id":"88dbffbc0062b913cbddfde8249ef2f3","title":"RevengeRAT — RevengeRAT · 木马/恶意软件 · PE32 .NET","md5":"88dbffbc0062b913cbddfde8249ef2f3","sha256":"275e4633982c0b779c6dcc0a3dab4b2742ec05bc1a3364c64745cbfe74302c06","family":"RevengeRAT","apt":null,"verdict":null,"sample_type":"木马/恶意软件","lang":"C#","file_format":"PE32 .NET","compiler":"VB.NET","published_at":"2020-02-24T16:00:00.000Z","summary":"该样本被 DIE (Detect It Easy) 识别为 RevengeRAT 0.3 变种，使用 VB.NET 和 .NET Framework 2.0 (CLR v2.0.50727) 编译。 编译于 2020-02-25 17:39:20，大小 101.5 KB。 RevengeRAT 是知名的商业化远程访问木马，功能包括: 远程桌面控制、文件管理、进程管理、注册表操作、键盘记录、密码窃取、屏幕监控等。 该变种使用 CodeDom Compiler 动态编译技术，可能用于绕过静态检测。 SHA256: 275e4633982c0b779c6dcc0a3dab4b27...","url":"https://zseceye.com/report/88dbffbc0062b913cbddfde8249ef2f3","json_url":"https://zseceye.com/report/88dbffbc0062b913cbddfde8249ef2f3.json","html_url":"https://zseceye.com/report/88dbffbc0062b913cbddfde8249ef2f3","hash_urls":{"md5":"https://zseceye.com/hash/88dbffbc0062b913cbddfde8249ef2f3","sha256":"https://zseceye.com/hash/275e4633982c0b779c6dcc0a3dab4b2742ec05bc1a3364c64745cbfe74302c06"},"search_urls":{"md5":"https://zseceye.com/?q=88dbffbc0062b913cbddfde8249ef2f3","sha256":"https://zseceye.com/?q=275e4633982c0b779c6dcc0a3dab4b2742ec05bc1a3364c64745cbfe74302c06"},"sample_download_url":"https://zseceye.com/report/88dbffbc0062b913cbddfde8249ef2f3/sample","sample_filename":"275e4633.zip","iocs":[],"ips":[]}