Analysis
-
max time kernel
6s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
05-12-2022 07:45
General
-
Target
3660-149-0x00000000004A0000-0x0000000000F55000-memory.exe
-
Size
10.7MB
-
MD5
360f6472ed06fc923d8f56755a714bf8
-
SHA1
5f21a437a159b16689a7b7f77cf7bf024d2ce943
-
SHA256
cc4ecbd650c1f59f00db2cf194bcdae022567c14c06e2d1f603559d73e62a8d9
-
SHA512
2e4c740e3f6406aa2d5c7b20c9384066fbf8b5b292d67915248dff94751a5ee085d0ca2e54aae0afd2d0fb3768011e6099c70414a73a271fa55283763d0f2e25
-
SSDEEP
196608:gCXhg4tcFK5xpxlLgc+svhw+IArguUU/F5hjcah1FO:3Xh8FK5xpncchbg8fYaX0
Score
10/10
Malware Config
Signatures
-
BitRAT
BitRAT is a remote access tool written in C++ and uses leaked source code from other families.
-
Themida packer 1 IoCs
Detects Themida, an advanced Windows software protection system.
Processes
-
C:\Users\Admin\AppData\Local\Temp\3660-149-0x00000000004A0000-0x0000000000F55000-memory.exe"C:\Users\Admin\AppData\Local\Temp\3660-149-0x00000000004A0000-0x0000000000F55000-memory.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10.7MB