Extracted

• • Target

    87e6b22b6bb6e248e32715559ede43e88a608adfe0b212b163f149ee321dbc9e

  • Size

    3.8MB

  • MD5

    6a4dde85bb3ca671d8f2f82c5290de16

  • SHA1

    b7738a48df222c0088cfaa46afc274aa4b75b747

  • SHA256

    87e6b22b6bb6e248e32715559ede43e88a608adfe0b212b163f149ee321dbc9e

  • SHA512

    d93efae54bfa954874d5468c076fc0c1ab8d7b6856f8fdce1b191362f0dd4f76e20d586b56cf9db816e7b9d4470032373dd0371aad5aee330e1a005e43f40b11

  • SSDEEP

    49152:keLX23QW5VbNxuL1sEAjBQVwgY5uQUTkXsVB7xnkm3bexnl75Qw2igESW4GJOt8S:xE5NxuLoBa9w2igESjGy8XYAoJP

  Score

  10^/10

  bitrattrojan

  • BitRAT

    BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

    trojanbitrat

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2