Extracted

• • Target

    3dc477c663c3dd49496a4fcf7f0448b372d854e12c64067e5f289a1b5063d020

  • Size

    3.8MB

  • MD5

    1e72db56197eb1a502a0af1f0648d1bf

  • SHA1

    7f8f1108dd48724d0026c748e1a0958e449573fa

  • SHA256

    3dc477c663c3dd49496a4fcf7f0448b372d854e12c64067e5f289a1b5063d020

  • SHA512

    106975a8abdafb82e689b6efc5c5439bb59923d7833497d3e0dbf55ddd52ea13398a20363dfb42d2a97de3510cf228df9c835ef9b5466cae94187b97bd5f8a9c

  Score

  10^/10

  bitrattrojan

  • BitRAT

    BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

    trojanbitrat

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2