Extracted

• • Target

    a1d9736DPC.exe

  • Size

    1.7MB

  • MD5

    7e9811681ab52fd4e2ac4441f6a3cc20

  • SHA1

    201d2cf050703a3c030d996c01812ae7804f8008

  • SHA256

    3f558725f854c9668efb18a9b88e4b24798170953fd74607f8678afa3982bffe

  • SHA512

    a9aa1f53a006fc92934da39b3667b36da1a8803244b3e30ef29085408722f07a697c15286d33b00f1f261d5cdf84ade7f2b9376f8638d52205dc60b0d06a0f6b

  • SSDEEP

    49152:1BteuU1W+Up1gB9/hsG5jtSXWOjhGBRjIugWeRpTC:QuU1F2gH/mjtGBxJgWWTC

  Score

  10^/10

  bitrattrojanupx

  • BitRAT

    BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

    trojanbitrat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2