Extracted

• • Target

    East-Tec.All.Products.Universal.Keygen.v1.0.WinALL.Keygen.Only-BRD.exe

  • Size

    4.0MB

  • MD5

    7390fb261650e9015a00c29c61ac3677

  • SHA1

    26ff56591d829d03c5968c2959631a13213ee505

  • SHA256

    f507b2877afe1b0b8b53a3ab4481a5c17610c9570b1f85132cedb52192922ff4

  • SHA512

    8f784b768d8052f037f0a1b243e083262fa1758e9c156009aa5b454a13da608c5a8ac2c9e45a567744d044973ccdddebcb8b3a69c44b8360e28575b82c429c52

  • SSDEEP

    12288:a6eVQkTrvj4d+dONGRpz5ljXeLY8Kk5tqGN0GvTBb/A4h75L:anQkTf4d+INGxetl0GrBb/A675

  Score

  10^/10

  latentbotdiscoveryevasiontrojan

  • LatentBot

    Modular trojan written in Delphi which has been in-the-wild since 2013.

    trojanlatentbot

  • Modifies firewall policy service

    evasion

  • Uses the VBS compiler for execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2