Extracted

• • Target

    mrkbkdFdag.exe

  • Size

    1.6MB

  • MD5

    cf6e51ffe0d98c19e74880e8ce170a9a

  • SHA1

    2709d62f268d92c5d43aece4bd2089dace55c1ad

  • SHA256

    23e10e6ce7df576f68283f2ceb00b0975170a3ef778161b35e3bbb578b4c7416

  • SHA512

    25ff5c51aea16dc4f2ae5eb70f403eb2d386018297b86d0ccf4fe4dce6929d1409ae831c2721c404e9f58472873ce6e6b87a419b2355aee7fda7773366aab03a

  Score

  10^/10

  bitrattrojanupx

  • BitRAT

    BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

    trojanbitrat

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2