Extracted

• • Target

    94644247e987a89b4597900e155b0091f2cbd27ea6ddedef3c7b82d2ed4f616f

  • Size

    3.8MB

  • MD5

    1067928dcbd36e9bf33bd93467b7e950

  • SHA1

    dca092869448f09c8a3892df86796568727084dc

  • SHA256

    94644247e987a89b4597900e155b0091f2cbd27ea6ddedef3c7b82d2ed4f616f

  • SHA512

    26dcfee0a4f80a53c50c9a1e1462c5c83da4e4c715905fc532013681709ca654f737281e023b7163d2eea529a910ba7966bff80a00d5ef876871c0bf3df3b5ee

  • SSDEEP

    98304:d77Pmq33rE/JDLPWZADUGer7B6iY74M/0mlwXVZ4FB:5+R/eZADUXR

  Score

  10^/10

  bitrattrojan

  • BitRAT

    BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

    trojanbitrat

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2