Extracted

• • Target

    F6SNA4S9KD7_ETRANSFER_RECEIPT.exe

  • Size

    300.0MB

  • MD5

    57b653c941b2f756f705dc40d5abf80e

  • SHA1

    c0c0101c1b2a523e6baf7964ba94e733fae77c32

  • SHA256

    deacd98df57ca5cab910cab1fba939fd02eab616cb70993fd5eae81c6547cda0

  • SHA512

    be671100021853d8932b48dcda89e63a79832d7ff030527e69cee5076b8d247c206a12707330698d8781ea7a43f5758323f6f4a9627389e98be41ce029ef717f

  Score

  10^/10

  bitrattrojanupx

  • BitRAT

    BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

    trojanbitrat

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Loads dropped DLL

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2