Extracted

• • Target

    555.exe

  • Size

    1.4MB

  • MD5

    be3a6f123744a0e766dac337f69b4db1

  • SHA1

    2f1ab8ebeb853aa6696bfd50df6c360d7709bf96

  • SHA256

    3b5d3ee4924007c9d14360ff437c61288195d348c3f876e25629fd6aa9c5c9c0

  • SHA512

    73de60dcc105008e4b7937540433f442a4a073f481707dc19e42cab3362dd2a4792dfb7fd4451be32910851a644b24fcc85742d2f0f50bbd9951f4c7f34aa33f

  • SSDEEP

    24576:DndRKZCy2BrhCeU2i2cJijFbCBTPmiY05tJMSQp5ysA7Yg1nLkzh1fylB:LXDFBU2iIBb0xY/6sUYY8C

  Score

  10^/10

  bitrattrojanupx

  • BitRAT

    BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

    trojanbitrat

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1

• • Target

    out.upx

  • Size

    3.8MB

  • MD5

    e949f773f2ac6eea1d19d08645028d64

  • SHA1

    3a6dd2edcf9dde8724d1eedcd98950e0cda0477e

  • SHA256

    6515e0b517acecf6065eb581f7ae38b175dab3abdffb1b048b7451cbff7fa4ab

  • SHA512

    3f89c6d169299d9da97c5eae56208c4dedd920fc1b917c2b2ce3b2253911b13038b7f1bb6270a08615356211372e80d4d5c77058f5c150973db409f412bca827

  • SSDEEP

    98304:m77Pmq33rE/JDLPWZADUGer7B6iY74M/zmlwXVZ:Y+R/eZADUXR

  Score

  3^/10
  behavioral2