Extracted

• • Target

    ctb.exe

  • Size

    1.4MB

  • MD5

    4614702a90f570a0764605d800613545

  • SHA1

    920c7eab63af0dde1410686a69100eeb0733aa03

  • SHA256

    ca0e5c90261ae7ac2e46cd085ae31f1a1bfd7d7f030a6d33ba6a2cb280176ad1

  • SHA512

    6e6077db88395f51fd2a434a742fa4da34fbcb0677f844510eab8008ff615008fe6a747c0e4a5f1754818eae11af47afa6cfeb1d334685eca485d4fb5dedbfc4

  • SSDEEP

    24576:mndRKZCy2BrhCeU2i2cJijFbCBTPmiY05tJMSQp5ysA7Yg1nLkzZDEc:wXDFBU2iIBb0xY/6sUYYEH

  Score

  10^/10

  bitrattrojanupx

  • BitRAT

    BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

    trojanbitrat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2