Extracted

• • Target

    1fc5241baee22db7f0d86911824fec1d.exe

  • Size

    1.8MB

  • MD5

    1fc5241baee22db7f0d86911824fec1d

  • SHA1

    e296a5096a939ce0d6f0505b73d6c23ca1345b85

  • SHA256

    e10c59a299c2ac508cc2184b7a51429af0d2a08ee402be587feb96afc21a8200

  • SHA512

    95e5251a5bb3719009ca043ad89d552cc6dab79648698bb4e23c8e4ba211307a1b0a72decd86dc10440912e701bc1e1551d1a423de4db98b47cee314e9a3b309

  • SSDEEP

    49152:uKrA7xvTHIKkeLkilPcFxRxuH3MabTyikw:7EFvTHIKkeLkWUBsH3nbTyij

  Score

  10^/10

  bitrattrojan

  • BitRAT

    BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

    trojanbitrat

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  • Suspicious use of SetThreadContext

  behavioral1behavioral2