Extracted

• • Target

    b2a8d0b4950ca420355a1dd65790e4a27be0cff50a19521eed878327d454d975

  • Size

    3.8MB

  • MD5

    4ea6a19405324ba21d34033402070f80

  • SHA1

    d0f43fd5b26ac14135ba8a76a004f81ef1da6b34

  • SHA256

    b2a8d0b4950ca420355a1dd65790e4a27be0cff50a19521eed878327d454d975

  • SHA512

    90ecbe0f2b262d5e705a4f515751b35c95a11261573345f4b9981be85209d46bbbaed401f2ff1a5aacad7d523d62cbcb62c904e9958ee2d699b8d6e614e71987

  • SSDEEP

    49152:zXUIEeZzdeh/c7p1rNdd+JNEj0ykdj21x1YhFlX4bA/Hg/11VzeLG/7wqNKB2VIr:zXrEeZzdhjuV/gd1VzsGUqNKTHvQeK6

  Score

  10^/10

  bitrattrojan

  • BitRAT

    BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

    trojanbitrat

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2