Extracted

• • Target

    bdc0fb9996314a09eab99caddb084a5bf0ea0a75a6d3d906d51e9189d6c0a0a0

  • Size

    3.8MB

  • MD5

    0e0cf65ed502cda7c8e98090b633ac26

  • SHA1

    8afc67c5469a0e3c6df81c25571e06dca887d518

  • SHA256

    bdc0fb9996314a09eab99caddb084a5bf0ea0a75a6d3d906d51e9189d6c0a0a0

  • SHA512

    6114e73f44a3fef62793eedb54e56ad9d801c9f47f2e14e31b3ec4b537ca303ae8ecd0e041ac8f3e5eea50b930ec82b49d1df1274d96dd04a0f06d51ee7de633

  • SSDEEP

    98304:d77Pmq33rE/JDLPWZADUGer7B6iY74M/YmlwXVZ4FB:5+R/eZADUXR

  Score

  10^/10

  bitrattrojan

  • BitRAT

    BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

    trojanbitrat

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2