General

  • Target

    2024-67-0x0000000000400000-0x00000000007E4000-memory.dmp

  • Size

    3.9MB

  • MD5

    0e221e728d7ce44329ecf754b2d290c6

  • SHA1

    f17e4eb95b63a875f4cac885c5249fe75268add3

  • SHA256

    102254a207dea9839601df7ade1e150a087304a0595ecd27cd676bf539d0be2f

  • SHA512

    ce0191c18c2367b97f33974148255536fb19110fc8116beb1b18a8bc5e3c9f5b1304099e5b72304d6c0ad66571a3ddd6d667b9c42a5ee7eff711bc0f551b3518

  • SSDEEP

    98304:l77Pmq33rE/JDLPWZADUGer7B6iY74M//mlwXVZ:x+R/eZADUXR

Score
10/10

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

bitone9090.duckdns.org:9090

Attributes
  • communication_password

    e10adc3949ba59abbe56e057f20f883e

  • tor_process

    tor

Signatures

  • Bitrat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 2024-67-0x0000000000400000-0x00000000007E4000-memory.dmp
    .exe windows x86


    Headers

    Sections