General

  • Target

    1972-70-0x0000000000400000-0x00000000007E4000-memory.dmp

  • Size

    3.9MB

  • MD5

    9da4154013fb113da4d9dd2e49239950

  • SHA1

    268df843fc3a67bd33b57ff8957fbeb2f54f1e38

  • SHA256

    3e63f3d0c27e6f362412cfe9208c25525651aa9230237398dab1b87dfa1315c6

  • SHA512

    bc2a1d95b3c0455d8042933074925742d4026250709952dfa34b92a0decda6d26d35701c0dccd33c83d7b5fe2755090c36e74235ebdac8df505ac045fc561160

  • SSDEEP

    98304:l77Pmq33rE/JDLPWZADUGer7B6iY74M/kmlwXVZ:x+R/eZADUXR

Score
10/10

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

bitone9090.duckdns.org:9090

Attributes
  • communication_password

    e10adc3949ba59abbe56e057f20f883e

  • tor_process

    tor

Signatures

  • Bitrat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 1972-70-0x0000000000400000-0x00000000007E4000-memory.dmp
    .exe windows x86


    Headers

    Sections