Extracted

Extracted

• • Target

    V2N1M2_P.VBS

  • Size

    556B

  • MD5

    d720ecdccd82525a211f09cfefcee6ee

  • SHA1

    f415e9c1a072bdd44f54edabfe5c57f39f71fb0c

  • SHA256

    2c882065daea3d83e4ccadf5ce780f33b571ec1799691d0355c4c5a0c98dadc0

  • SHA512

    1a18293a40e66e9efefb455577b819f83a33c6aa33e953b124130cc3d443658a501ece61edd18b2524224e053dba4dbe596c4ebf656943611b3e97b317770dd0

  Score

  10^/10

  bitratnanocorenjrathackedevasionkeyloggerpersistencespywarestealertrojanupx

  • BitRAT

    BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

    trojanbitrat

  • BitRAT Payload

  • NanoCore

    NanoCore is a remote access tool (RAT) with a variety of capabilities.

    keyloggertrojanstealerspywarenanocore

  • njRAT/Bladabindi

    Widely used RAT written in .NET.

    trojannjrat

  • Blocklisted process makes network request

  • Modifies Windows Firewall

    evasion

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Adds Run key to start application

    persistence

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2