Extracted

• • Target

    SPALOKSIUJAHYDRS.exe

  • Size

    300.0MB

  • MD5

    3d5164f658be6404df30aafb7e35bcfb

  • SHA1

    2505d715093103eda2cff86f8328e32b75462242

  • SHA256

    d8556549bce64ee0047c08b7326b609a8a406981749575320b89ef47cc9678f4

  • SHA512

    f5e1ae28040781c05ebbdd37ee4f340c0b7bf27f4c97006fc9a150bdc7e1905081c9e416bf915da33377a22e6eb54b416b0cc6fa1af14212ca558db11cea9cc9

  Score

  10^/10

  bitrattrojanupx

  • BitRAT

    BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

    trojanbitrat

  • Executes dropped EXE

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Uses the VBS compiler for execution

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2