Behavioral task
behavioral1
Sample
bigger.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bigger.exe
Resource
win10v2004-20220901-en
General
-
Target
bigger.exe
-
Size
287KB
-
MD5
e7978edb4b553918e4222d8457c23aeb
-
SHA1
3d1ac508e9efa8777eb78ea12e90f1adaeabaa0e
-
SHA256
c6c02a4e5dc5d830d9d16cb51e6e4ef3e640385648d0ec09627032757704eaa3
-
SHA512
0863911083e059f16a2cd3503418d086b47d9ec9b3dcd54e5883c49a6a1163f56e42c6f3306cb3bb51b5ea89dcd7c1097c9356257377245ba552d3e38a9b4700
-
SSDEEP
3072:9Zx/VapN7+4VcKRgh4twB17xCPU9OEbFT0WKgzxVPIU2ZrL5ThWKXnyKvubikLkW:9Zx/Vg+43RAfTlB9DFo9iUrL5Th7X14D
Malware Config
Extracted
bruteratel
45.43.2.62:443
-
c2_auth
ransomness12345
-
uri
/blog
/view
/register
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.93 Safari/537.36
Signatures
-
Bruteratel family
Files
-
bigger.exe.exe windows x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE