Overview

overview

10

Static

static

10

0866863301...a9.exe

windows7-x64

5

0866863301...a9.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    086686330159cbeae2d5c94b25967fa9.exe

  • Size

    3.8MB

  • Sample

    220727-zhlqqahcgq

  • MD5

    086686330159cbeae2d5c94b25967fa9

  • SHA1

    19f3571b45823fcf1b1c05cdd25f1c98c45c712a

  • SHA256

    f93e5dfa75e3edfabc8bd414b9beaa735ccd8a91b12f9c57bb923aa5c3232e9d

  • SHA512

    9ff98a9211162972fcbb277ce1d5cffea39303a25e7209b8a8a3d7ed0e135630b3dee122323c725022a078c462634b34c82ace4baf3680cedc1865f9c27dbba5

Score
10/10
bitrat

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

103.153.79.240:1234

Attributes
  • communication_password

    e10adc3949ba59abbe56e057f20f883e

  • tor_process

    tor

Targets

    • Target

      086686330159cbeae2d5c94b25967fa9.exe

    • Size

      3.8MB

    • MD5

      086686330159cbeae2d5c94b25967fa9

    • SHA1

      19f3571b45823fcf1b1c05cdd25f1c98c45c712a

    • SHA256

      f93e5dfa75e3edfabc8bd414b9beaa735ccd8a91b12f9c57bb923aa5c3232e9d

    • SHA512

      9ff98a9211162972fcbb277ce1d5cffea39303a25e7209b8a8a3d7ed0e135630b3dee122323c725022a078c462634b34c82ace4baf3680cedc1865f9c27dbba5

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks