Extracted

• • Target

    8e71b0bf7af69bb43405048951a96a826f8d15b35bcfcaf18230572966aeecee

  • Size

    3.8MB

  • MD5

    6247c6d8d537d12f6f05fab7f20d2c77

  • SHA1

    154b95d15a86eafeae17def803616808c77fa882

  • SHA256

    8e71b0bf7af69bb43405048951a96a826f8d15b35bcfcaf18230572966aeecee

  • SHA512

    12d64e25fa2d3dbd9034ec1ff8ca02e15788102ffbfcd174c1d0f84728719d6f149229dd2ef91c980bbaa62d1e6530da797e4c4ef90f9e3bed8d37edd598d727

  • SSDEEP

    98304:o77Pmq33rE/JDLPWZADUGer7B6iY74M/fmlwXVZ4FB:2+R/eZADUXR

  Score

  10^/10

  bitrattrojan

  • BitRAT

    BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

    trojanbitrat

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2