Overview

overview

10

Static

static

10

0001.exe

windows7_x64

10

0001.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0001.exe

  • Size

    3.8MB

  • Sample

    211011-szq87shfap

  • MD5

    9c6bda87c91a4bb5b1a70a76d7fe4486

  • SHA1

    1732841f6f297ee0e596e36252c799922acc74ad

  • SHA256

    8a82d9904985c9779c317052ad31585aacdf6b745b88a5ec3a8bcb697a8e9a8d

  • SHA512

    e959b556796c9d5c152a38ab94398c5c4b23522ee2c991d7587484f7899582da485aacff67bb3e4e47d47c99f6a4d235f4ab5c05de4d41880b8d55ddef4b71ec

Score
10/10
bitratsuricata

Malware Config

Targets

    • Target

      0001.exe

    • Size

      3.8MB

    • MD5

      9c6bda87c91a4bb5b1a70a76d7fe4486

    • SHA1

      1732841f6f297ee0e596e36252c799922acc74ad

    • SHA256

      8a82d9904985c9779c317052ad31585aacdf6b745b88a5ec3a8bcb697a8e9a8d

    • SHA512

      e959b556796c9d5c152a38ab94398c5c4b23522ee2c991d7587484f7899582da485aacff67bb3e4e47d47c99f6a4d235f4ab5c05de4d41880b8d55ddef4b71ec

    Score
    10/10
    suricata

    • suricata: ET MALWARE Observed Malicious SSL Cert (BitRAT CnC)

      suricata: ET MALWARE Observed Malicious SSL Cert (BitRAT CnC)

      suricata

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks