Extracted

• • Target

    5bd6c938151ac2b323a9d6857bbd73958ceb3b6478392ceb57cdbea080a8eca4

  • Size

    3.8MB

  • MD5

    568c94af14595d52ce51eed00f792019

  • SHA1

    93a0bf561b94cde338dc1285d35d673418fa8d5b

  • SHA256

    5bd6c938151ac2b323a9d6857bbd73958ceb3b6478392ceb57cdbea080a8eca4

  • SHA512

    7f96f0135f3d44e8c6266fece64c510737fe77b15e32c3213c4fcfc78cded1044a3cb08308fc118776eb21ecda437a7706bdae7f9b2586d1586410c356918ef4

  • SSDEEP

    49152:keLX23QW5VbNxuL1sEAjBQVwgY5uQUTkXsVB7xnkm3bexnl75Qw2igESW4GJOt8e:xE5NxuLoBa9w2igESjGy8XYAoJ7

  Score

  10^/10

  bitrattrojan

  • BitRAT

    BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

    trojanbitrat

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2