bitrat | ad86519fc8a05dcbdc0e75cd940ed3cad97f1da907756f703f9b07de4966f2c6 | Triage

Sharing

General

Target

ad86519fc8a05dcbdc0e75cd940ed3cad97f1da907756f703f9b07de4966f2c6
Size

3.8MB
Sample

221128-btke2ade92
MD5

6caa5321b8d503335f4018acde289b5c
SHA1

cf967833b8ca177d404ff5b608e3658d44248cfb
SHA256

ad86519fc8a05dcbdc0e75cd940ed3cad97f1da907756f703f9b07de4966f2c6
SHA512

4f8c8de934a5fb9a52e877f60c4def63318fe8fd0a7cadb4d59d2a0923a267756577a54d2e36740250fe9698f52b89533d1f18876f6d173ffc8a45efce229c13
SSDEEP

49152:ZXUIEeZzdeh/c7p1rNdd+JNEj0ykdj21x1YhFlX4bA/Hg/11VzeLG/7wqNKB2VI/:ZXrEeZzdhjuV/gd1VzsGUqNKTHvQel

Score

10^/10

bitrat trojan

Malware Config

Extracted

Family

bitrat

Version

1.35

C2

136.144.41.204:5506

Attributes

communication_password
d74a214501c1c40b2c77e995082f3587
tor_process
tor

Targets

- Target
  
  ad86519fc8a05dcbdc0e75cd940ed3cad97f1da907756f703f9b07de4966f2c6
- Size
  
  3.8MB
- MD5
  
  6caa5321b8d503335f4018acde289b5c
- SHA1
  
  cf967833b8ca177d404ff5b608e3658d44248cfb
- SHA256
  
  ad86519fc8a05dcbdc0e75cd940ed3cad97f1da907756f703f9b07de4966f2c6
- SHA512
  
  4f8c8de934a5fb9a52e877f60c4def63318fe8fd0a7cadb4d59d2a0923a267756577a54d2e36740250fe9698f52b89533d1f18876f6d173ffc8a45efce229c13
- SSDEEP
  
  49152:ZXUIEeZzdeh/c7p1rNdd+JNEj0ykdj21x1YhFlX4bA/Hg/11VzeLG/7wqNKB2VI/:ZXrEeZzdhjuV/gd1VzsGUqNKTHvQel
Score

10^/10

bitrat trojan
- BitRAT
  BitRAT is a remote access tool written in C++ and uses leaked source code from other families.
  trojan bitrat
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2