Extracted

• • Target

    Radicado De La Denuncia.exe

  • Size

    1.1MB

  • MD5

    f4870d32cab14312598325c151c86f98

  • SHA1

    2b6799150e4fe9947fe2d13ef929862d8f4649d3

  • SHA256

    a1031a4ec54eb26124df7ecbb1dd0feb65434db2b97a3738de938f74ecb2527f

  • SHA512

    2fd80500d76e7d7f4d47361bace130d967a3de23bae0b3251494da50c9a1d1769b7448c516311807b06f88323c65ad5aaf40a8dddecdefc221fa119436809ba0

  Score

  10^/10

  bitratpersistencetrojan

  • BitRAT

    BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

    trojanbitrat

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Adds Run key to start application

    persistence

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2