Suspicious
Suspect

3eb5b3681101301f829cd343113a74f1

PE Executable
MD5: 3eb5b3681101301f829cd343113a74f1
Size: 20.48 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Portable Executable file
Size
20.48 KB · 20,480 B
First seen
2026-03-27 18:31 · 7 months ago
Last seen
2026-03-27 18:31 · 7 months ago
Last analysis
2026-03-27 19:40 · 7 months ago
Hashes
MD5 3eb5b3681101301f829cd343113a74f1 Sha1 e3f0e01a15e1ecd2b318eb288216080ca761db04 Sha256 daaf92a3eb075770eeb95d618f49046246d83b3dea7855ea503a91b249c8e87b Sha384 e8fee05879b9dd0664476204c76f71c5927bf77e1e738e9a8bbd7c7a081150136b81cddb1dbd76bf429e99005e4c1a19 Sha512 5e75e9b270c66a080214cbb97b370f614e893c07ac6a6a21e09cb02377a4904556c5e25c75e8c3f45278c5d9c9a8a4f7ab31a63689b7dbf3fca480529d41ff62 SSDeep 384:TXPoeOQfy4q4MWsjvRPJnMga8T4pzOIDPXM0sVKXyrwG9qCzYcHe+Z:Ee+4qYKa+I7oJdzYcHe+Z TLSH C892295267F58622C2BC13BE192162326730C76B5616C3BD3DEC41FB6B633819A926D2
Detection
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
Symbol obfuscation
Low
2 files
EXE3eb5b3681101301f829cd343113a74f1RevengeRat
Structure
BINResources
BINRT_MANIFEST
BINID:0001
BINID:0
Name Value
Module Name
Nuclear Explosion.exe
Full Name
Nuclear Explosion.exe
EntryPoint
System.Void Nuclear_Explosion.Atomic::Main()
Scope Name
Nuclear Explosion.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v2.0.50727
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Nuclear Explosion
Assembly Version
0.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
127
Main Method
System.Void Nuclear_Explosion.Atomic::Main()
Main IL Instruction Count
22
Main IL
nop <null>
nop <null>
ldstr 181
call System.Double Microsoft.VisualBasic.CompilerServices.Conversions::ToDouble(System.String)
ldc.r8 1000
mul <null>
call System.Double System.Math::Round(System.Double)
conv.ovf.i4 <null>
call System.Void System.Threading.Thread::Sleep(System.Int32)
nop <null>
leave.s IL_0031: nop
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
nop <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_0031: nop
nop <null>
nop <null>
nop <null>
ldsfld Nuclear_Explosion.Atomic Nuclear_Explosion.Atomic::SCG
callvirt System.Void Nuclear_Explosion.Atomic::Execute()
nop <null>
ret <null>
Module Name
Nuclear Explosion.exe
Full Name
Nuclear Explosion.exe
EntryPoint
System.Void Nuclear_Explosion.Atomic::Main()
Scope Name
Nuclear Explosion.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v2.0.50727
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Nuclear Explosion
Assembly Version
0.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
127
Main Method
System.Void Nuclear_Explosion.Atomic::Main()
Main IL Instruction Count
22
Main IL
nop <null>
nop <null>
ldstr 181
call System.Double Microsoft.VisualBasic.CompilerServices.Conversions::ToDouble(System.String)
ldc.r8 1000
mul <null>
call System.Double System.Math::Round(System.Double)
conv.ovf.i4 <null>
call System.Void System.Threading.Thread::Sleep(System.Int32)
nop <null>
leave.s IL_0031: nop
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::SetProjectError(System.Exception)
nop <null>
call System.Void Microsoft.VisualBasic.CompilerServices.ProjectData::ClearProjectError()
leave.s IL_0031: nop
nop <null>
nop <null>
nop <null>
ldsfld Nuclear_Explosion.Atomic Nuclear_Explosion.Atomic::SCG
callvirt System.Void Nuclear_Explosion.Atomic::Execute()
nop <null>
ret <null>
2 files
EXE3eb5b3681101301f829cd343113a74f1RevengeRat
Structure
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙