Overview

overview

10

Static

static

10

1176-69-0x...ry.exe

windows7-x64

1

1176-69-0x...ry.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1176-69-0x0000000000400000-0x00000000007E4000-memory.dmp

  • Size

    3.9MB

  • MD5

    2a3fee43930a1c0dd7de68b71f37bb8d

  • SHA1

    65ab40176cd73c136927e052d706ecae25564123

  • SHA256

    91e53166a02cb403c71291838b6c2cd06bd6708c6dd3c2b68cda60e02165bf31

  • SHA512

    7826b36df4110b26137a8f42fba43b70b538c078bd948687adafe214284cf4e1ea81e4b67e355a3dd8d3a4b0978c5085931f3df045c523cb5f0765f41f890a6e

  • SSDEEP

    98304:877Pmq33rE/JDLPWZADUGer7B6iY74M/BmlwXVZ:K+R/eZADUXR

Score
10/10
upxbitrat

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

sddvniduchdj.con-ip.com:1880

Attributes
  • communication_password

    202cb962ac59075b964b07152d234b70

  • install_dir

    AppData

  • install_file

    Discord.exe

  • tor_process

    tor

Signatures

  • Bitrat family
    bitrat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

Files

  • 1176-69-0x0000000000400000-0x00000000007E4000-memory.dmp
    .exe windows x86


    Headers

    Sections