{"id":"af48897e401a79baf8086585c18cf8fe","title":"RevengeRAT — RevengeRAT · 木马/恶意软件 · PE32 .NET","md5":"af48897e401a79baf8086585c18cf8fe","sha256":"acec05fb087440c24b6ac8a15051b8fc7fdfd92bdf458b165e1e19265395b595","family":"RevengeRAT","apt":null,"verdict":null,"sample_type":"木马/恶意软件","lang":"C#","file_format":"PE32 .NET","compiler":"VB.NET","published_at":"2020-02-24T16:00:00.000Z","summary":"该样本被 DIE (Detect It Easy) 识别为 RevengeRAT 0.3 变种，使用 VB.NET 和 .NET Framework 2.0 (CLR v2.0.50727) 编译。 编译于 2020-02-06 20:01:35，大小 17.5 KB。 RevengeRAT 是知名的商业化远程访问木马，功能包括: 远程桌面控制、文件管理、进程管理、注册表操作、键盘记录、密码窃取、屏幕监控等。 该变种使用 CodeDom Compiler 动态编译技术，可能用于绕过静态检测。 SHA256: acec05fb087440c24b6ac8a15051b8fc...","url":"https://zseceye.com/report/af48897e401a79baf8086585c18cf8fe","json_url":"https://zseceye.com/report/af48897e401a79baf8086585c18cf8fe.json","html_url":"https://zseceye.com/report/af48897e401a79baf8086585c18cf8fe","hash_urls":{"md5":"https://zseceye.com/hash/af48897e401a79baf8086585c18cf8fe","sha256":"https://zseceye.com/hash/acec05fb087440c24b6ac8a15051b8fc7fdfd92bdf458b165e1e19265395b595"},"search_urls":{"md5":"https://zseceye.com/?q=af48897e401a79baf8086585c18cf8fe","sha256":"https://zseceye.com/?q=acec05fb087440c24b6ac8a15051b8fc7fdfd92bdf458b165e1e19265395b595"},"sample_download_url":"https://zseceye.com/report/af48897e401a79baf8086585c18cf8fe/sample","sample_filename":"acec05fb.zip","iocs":[],"ips":[]}