Extracted

• • Target

    43e0eed9a47f0eb655af50a9aacd02b1.exe

  • Size

    2.0MB

  • MD5

    43e0eed9a47f0eb655af50a9aacd02b1

  • SHA1

    6dbc00b84c23fc44857bd81cc69fe62430bf9c82

  • SHA256

    b67e1dc98007c0bf5afa9ca1f840de158cb01eedbce373d791b80059de98b011

  • SHA512

    12c160f00b6a50ed84d4e3d90971cad17d67048e291210bef2e8bff8bb8acbfc18f0de26284e1f5289f9612c3efcd1659068f886404cd0e21487a9a109207f75

  Score

  10^/10

  bitratsuricatatrojanupx

  • BitRAT

    BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

    trojanbitrat

  • suricata: ET MALWARE Observed Malicious SSL Cert (BitRAT CnC)

    suricata: ET MALWARE Observed Malicious SSL Cert (BitRAT CnC)

    suricata

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2