General

  • Target

    CYFXHBF.html

  • Size

    1.4MB

  • MD5

    cd8b3a29d0d7ef90d4110e5db4f1ab31

  • SHA1

    24a001db4ba57bc94daf903299536a9ce0263bad

  • SHA256

    6d84e678810bd95fca73f9ca132b8f8748da8440a45a33bd8923ffe10d26eadb

  • SHA512

    87a0a7e26a64d27d56343bb033707b9936e2330b043da9ba8914c5e2f9945047c322cdcc181ba55144e802f69f328abaa9ef612acd0cecb5154d2c92c98c4a1d

  • SSDEEP

    24576:7ndRKZCy2BrhCeU2i2cJijFbCBTPmiY05tJMSQp5ysA7Yg1nLkzxcy9uuk2Nvv:zXDFBU2iIBb0xY/6sUYYk9nhxv

Score
10/10

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

storage.nsupdate.info:8973

Attributes
  • communication_password

    bf771c9d082071fe80b18bb678220682

  • tor_process

    tor

Signatures

  • Bitrat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • CYFXHBF.html
    .exe windows x86


    Headers

    Sections

  • out.upx
    .exe windows x86


    Headers

    Sections