General

  • Target
    Cellik 4.exe
  • Size 28.2MB
  • Sample261002-dprdwstsct
  • SHA256 476d7fefbc5f078494d77bd393df9a97b4268faaf4908156d85c0155f8a1e00c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Cellik 4.exe
    • Size 28.2MB
    • SHA256 476d7fefbc5f078494d77bd393df9a97b4268faaf4908156d85c0155f8a1e00c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects BTMOB RAT

    • Family: BTMOB

      BTMOB is a Windows RAT written in C#.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks