Extracted

• • Target

    f6332f23fa99f7881e3793645d71e1643279391fce24eb1ff5a58adc318aec2a_JC.exe

  • Size

    338KB

  • MD5

    dbadf9908b622af274db313906a95d3f

  • SHA1

    de94f8284be7bee5880623c68fbc14a44ea61aa5

  • SHA256

    f6332f23fa99f7881e3793645d71e1643279391fce24eb1ff5a58adc318aec2a

  • SHA512

    dcb8055cddc77ac267b726019ec68a4a200f27531cffd291fa59bd15950c02c4ae21ec2265a09334fd05b6d8cb15cbfac35beaa4ededeb788dc7b8470adfe521

  • SSDEEP

    6144:e84kJM8GgA188qLgXERTxM/BRhDm1l4Rh0xIpTYx2ap/mZX1BUCvEHX:h4kpy88cgXERTxMJRel4Rh0ep0xRp/ms

  Score

  10^/10

  originbotnetkeyloggerpersistencerattrojan

  • OriginBotnet

    OriginBotnet is a remote access trojan written in C#.

    trojanratkeyloggeroriginbotnet

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2