General

  • Target

    1404-150-0x0000000000400000-0x00000000007E4000-memory.dmp

  • Size

    3.9MB

  • MD5

    b2081364abf9dd157fd611c9aacd2d09

  • SHA1

    a696b2d936b65446b30fcfddf01c98cb0195fdbc

  • SHA256

    9480836bb3ac55bdeefddd98dd1abddce669328ac85fe957a341d31486616b71

  • SHA512

    bb0b19bb815b415608a99502070e746d571acbe3b8fd9f412d18348f99b302fc58ea2bb8f6c41966b96da0690610ca3dae6c8eb3333d8d1b99606bbeaced7463

  • SSDEEP

    98304:M77Pmq33rE/JDLPWZADUGer7B6iY74M/dmlwXVZ:a+R/eZADUXR

Score
10/10

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

pedroleonta822.con-ip.com:5020

Attributes
  • communication_password

    202cb962ac59075b964b07152d234b70

  • tor_process

    tor

Signatures

  • Bitrat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 1404-150-0x0000000000400000-0x00000000007E4000-memory.dmp
    .exe windows x86


    Headers

    Sections