General

  • Target

    f93e5dfa75e3edfabc8bd414b9beaa735ccd8a91b12f9c57bb923aa5c3232e9d

  • Size

    3.8MB

  • Sample

    220727-zkxwrshdck

  • MD5

    086686330159cbeae2d5c94b25967fa9

  • SHA1

    19f3571b45823fcf1b1c05cdd25f1c98c45c712a

  • SHA256

    f93e5dfa75e3edfabc8bd414b9beaa735ccd8a91b12f9c57bb923aa5c3232e9d

  • SHA512

    9ff98a9211162972fcbb277ce1d5cffea39303a25e7209b8a8a3d7ed0e135630b3dee122323c725022a078c462634b34c82ace4baf3680cedc1865f9c27dbba5

Score
10/10

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

103.153.79.240:1234

Attributes
  • communication_password

    e10adc3949ba59abbe56e057f20f883e

  • tor_process

    tor

Targets

    • Target

      f93e5dfa75e3edfabc8bd414b9beaa735ccd8a91b12f9c57bb923aa5c3232e9d

    • Size

      3.8MB

    • MD5

      086686330159cbeae2d5c94b25967fa9

    • SHA1

      19f3571b45823fcf1b1c05cdd25f1c98c45c712a

    • SHA256

      f93e5dfa75e3edfabc8bd414b9beaa735ccd8a91b12f9c57bb923aa5c3232e9d

    • SHA512

      9ff98a9211162972fcbb277ce1d5cffea39303a25e7209b8a8a3d7ed0e135630b3dee122323c725022a078c462634b34c82ace4baf3680cedc1865f9c27dbba5

    Score
    5/10
    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks