Extracted

• • Target

    docrw20230914.exe

  • Size

    699KB

  • MD5

    e6f17e5433dcdd4ca662c8dbf32639db

  • SHA1

    0ce524d7110e18fba4d45623813bc85bc52c3b67

  • SHA256

    0c45c035d97ecfff230ad1e43e48fede7dfa12de465bedb69b75884e16bf2113

  • SHA512

    6ac3b42fac3733ea486354baaf47294eef45021835c7c42a4a5ca95f0ccbdd71cddeccfdee2c1b6d4d9e8ea021f8660ca116f7fed3f58dc7fadcc5205be35aed

  • SSDEEP

    12288:xP1loubhci5aaVy8vgwxMKhNxnZb7zmgMIQSGTFe8DKrUO:V1losyGaen9MkHZb7vQJTFen

  Score

  10^/10

  originbotnetkeyloggerrattrojan

  • OriginBotnet

    OriginBotnet is a remote access trojan written in C#.

    trojanratkeyloggeroriginbotnet

  • Suspicious use of SetThreadContext

  behavioral1behavioral2