Extracted

• • Target

    6da5fb48f8ce655b9af6ba6714978a897f72fd9c42414d3cdf4c70786bfccc86

  • Size

    3.8MB

  • MD5

    0b45475de2255fd85fc42f7f757ce0d3

  • SHA1

    a3e0c30fb9adf7313140baf4e5cfe0fd5ed96097

  • SHA256

    6da5fb48f8ce655b9af6ba6714978a897f72fd9c42414d3cdf4c70786bfccc86

  • SHA512

    d2f920cecb4f2fa669020f21316d7dacdb38b974e719f8f6f562186c725682bc0bfc405ddae53559c5b2dca673fdb15feca1e086e0a3109de823591aae627768

  • SSDEEP

    98304:J77Pmq33rE/JDLPWZADUGer7B6iY74M/EmlwXVZ4FB:F+R/eZADUXR

  Score

  10^/10

  bitrattrojan

  • BitRAT

    BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

    trojanbitrat

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2