Extracted

• • Target

    EIAK8SDE_ETRANSFER_RECEIPT.exe

  • Size

    300.0MB

  • MD5

    e6bc6a1d4120514519d615dd24d3d154

  • SHA1

    4310a252bc6dc162e56051913820d37a7980a1ed

  • SHA256

    261b4cf41fc8e008696a3a4704499cd8639bcbc27f6b4f8233d8253231b0de93

  • SHA512

    14e3cc9bae4bffc8dc9c097be7b484450d2827996a874a4ae36a3e8def5000881dba3e84afffa59884f8c122fdbe77457fd8da532ddd8834e0d44788886d460c

  Score

  10^/10

  bitratsuricatatrojanupx

  • BitRAT

    BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

    trojanbitrat

  • suricata: ET MALWARE Observed Malicious SSL Cert (BitRAT CnC)

    suricata: ET MALWARE Observed Malicious SSL Cert (BitRAT CnC)

    suricata

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1