Overview

overview

10

Static

static

a1d9736DPC.exe

windows7-x64

10

a1d9736DPC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a1d9736DPC.exe

  • Size

    1.7MB

  • Sample

    221028-gm124aefd5

  • MD5

    7e9811681ab52fd4e2ac4441f6a3cc20

  • SHA1

    201d2cf050703a3c030d996c01812ae7804f8008

  • SHA256

    3f558725f854c9668efb18a9b88e4b24798170953fd74607f8678afa3982bffe

  • SHA512

    a9aa1f53a006fc92934da39b3667b36da1a8803244b3e30ef29085408722f07a697c15286d33b00f1f261d5cdf84ade7f2b9376f8638d52205dc60b0d06a0f6b

  • SSDEEP

    49152:1BteuU1W+Up1gB9/hsG5jtSXWOjhGBRjIugWeRpTC:QuU1F2gH/mjtGBxJgWWTC

Score
10/10
bitrattrojanupx

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

192.3.76.153:5200

Attributes
  • communication_password

    e10adc3949ba59abbe56e057f20f883e

  • tor_process

    tor

Targets

    • Target

      a1d9736DPC.exe

    • Size

      1.7MB

    • MD5

      7e9811681ab52fd4e2ac4441f6a3cc20

    • SHA1

      201d2cf050703a3c030d996c01812ae7804f8008

    • SHA256

      3f558725f854c9668efb18a9b88e4b24798170953fd74607f8678afa3982bffe

    • SHA512

      a9aa1f53a006fc92934da39b3667b36da1a8803244b3e30ef29085408722f07a697c15286d33b00f1f261d5cdf84ade7f2b9376f8638d52205dc60b0d06a0f6b

    • SSDEEP

      49152:1BteuU1W+Up1gB9/hsG5jtSXWOjhGBRjIugWeRpTC:QuU1F2gH/mjtGBxJgWWTC

    Score
    10/10
    bitrattrojanupx

    • BitRAT

      BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

      trojanbitrat

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks