Extracted

• • Target

    F6SNA4S9KD7_ETRANSFER_RECEIPT.iso

  • Size

    300.6MB

  • MD5

    c1236b62b55e2f52d0d4cfa4f20af1a7

  • SHA1

    87e757fd829df3d0adfa66e99aa755f3c3d399a2

  • SHA256

    57b0116b1304296ff75e986d2dfcb2933331e9ca6336026bd4fdca89b0209acf

  • SHA512

    7e4742bd70e98d4647a86251c0fdee7f5b1dc999813033815b87910dd6d3ec9ea737c0d9d43d9714a7cbc53849d20e14cb540614613da05f573b5935f140da4d

  Score

  3^/10
  behavioral1behavioral2

• • Target

    F6SNA4S9KD7_ETRANSFER_RECEIPT.exe

  • Size

    300.0MB

  • MD5

    57b653c941b2f756f705dc40d5abf80e

  • SHA1

    c0c0101c1b2a523e6baf7964ba94e733fae77c32

  • SHA256

    deacd98df57ca5cab910cab1fba939fd02eab616cb70993fd5eae81c6547cda0

  • SHA512

    be671100021853d8932b48dcda89e63a79832d7ff030527e69cee5076b8d247c206a12707330698d8781ea7a43f5758323f6f4a9627389e98be41ce029ef717f

  Score

  10^/10

  bitratsuricatatrojanupx

  • BitRAT

    BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

    trojanbitrat

  • suricata: ET MALWARE Observed Malicious SSL Cert (BitRAT CnC)

    suricata: ET MALWARE Observed Malicious SSL Cert (BitRAT CnC)

    suricata

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Loads dropped DLL

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral3behavioral4