Extracted

• • Target

    namjs.exe

  • Size

    3.8MB

  • MD5

    523ba4342b29b679d735435562a54280

  • SHA1

    0b7661e3cdd86e6eb77a6016448810d90ec99cbd

  • SHA256

    b58321b95226031b34e9439804673533b0f16f921ec0bfb535c80b23b226a290

  • SHA512

    a813f4af3f278f7a5abf865a6e808a2f4190a1f21c5dea66cb7dd103fbbd423c5799db8beec532b85cc407d9033b788d6fad9ce52de7437d16b0bca826f6b8e7

  Score

  10^/10

  bitratsuricatatrojan

  • BitRAT

    BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

    trojanbitrat

  • suricata: ET MALWARE Observed Malicious SSL Cert (BitRAT CnC)

    suricata: ET MALWARE Observed Malicious SSL Cert (BitRAT CnC)

    suricata

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2