Overview

overview

10

Static

static

10

8ac53eb721...b7.exe

windows7-x64

10

8ac53eb721...b7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8563665664.zip

  • Size

    1.8MB

  • Sample

    221215-p8nb5afd4y

  • MD5

    e2231ca9407c77da8d9a5a38af1eb02c

  • SHA1

    4329501f45a124c700b00ddb2763bbb71a3d984a

  • SHA256

    44b576f182acffae9c6a4e41e84fe3a096facd41ad0ffbeb7821c420137fefef

  • SHA512

    a5226f99c99a506240f1890bd1207865e3def693afc39e104a7dd46888072865f37291852add1ffb1e5f564678ade73c948b84bd89cf400b3b080e43da50b640

  • SSDEEP

    24576:YZiuqodN3mqPrlytlP3W/ytLuDcY8FybjBj+j59HNUEpUvSfIRTXT3QKEJ+Nb6Yy:0HdNDymsG8yXd+tdNZyvSSTZNVXBTo2u

Score
10/10
bitrattrojan

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

wwww.ddnsgeek.com:59599

Attributes
  • communication_password

    32c93a52f919c37c05b22825e5a57a4a

  • tor_process

    tor

Targets

    • Target

      8ac53eb721a6ae815a870b81dad63a155c6518e20a84735550ed1f83dd380eb7

    • Size

      3.8MB

    • MD5

      221e0fa159b0892c04254280d9a46674

    • SHA1

      fbe9558c1bf14a8ec59b918084de51d6f7d9037b

    • SHA256

      8ac53eb721a6ae815a870b81dad63a155c6518e20a84735550ed1f83dd380eb7

    • SHA512

      084f35c331ec3c5a19dde1e5531b82206f2b5c2b0b3d315e72fca824890a4480141448c2fd22f65a00ffcb9de64103fe9e95282906154f6d24857be64a8ef8f9

    • SSDEEP

      98304:d77Pmq33rE/JDLPWZADUGer7B6iY74M/UmlwXVZ4FB:5+R/eZADUXR

    Score
    10/10
    bitrattrojan

    • BitRAT

      BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

      trojanbitrat

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks