Resubmissions
14-09-2022 16:15
220914-tqmp4aage7 10General
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://github.com/genekolgav/kpk/raw/main/
Resource
win7-20220812-en
windows7-x64
4 signatures
150 seconds
Malware Config
Extracted
Family
bitrat
Version
1.38
C2
bit100.accesscam.org:9090
Attributes
-
communication_password
81dc9bdb52d04dc20036dbd8313ed055
-
tor_process
tor
Targets
-
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-
Suspicious use of NtSetInformationThreadHideFromDebugger