Behavioral task
behavioral1
Sample
a373d064cabacfd615563b9f094ae79e051f8f481ebaade3acb662863662f359.exe
Resource
win7-20221111-en
General
-
Target
8611507438.zip
-
Size
1.8MB
-
MD5
6c539b6e93028f748968c0d9f9c1a498
-
SHA1
db8acf69807f382dbc5532cfc8c1ec1823835d91
-
SHA256
6a8831628879277d2a2dc0545d9ad93e81d77dd06aa0a5ecd6ad21e6906890e2
-
SHA512
ace4494c84a763e8340c3d21fe5e03304b4c00f5a6f54fe745eb9ae8c7897c9876c51ee0f48a72dc4a8c69010a4eac07943c6c715e859c2296dee948342317f3
-
SSDEEP
49152:iHdNDymsG8yXd+tdNZyvSSTZNVXb7xBLsJs:QdTscSSTZNBxBLKs
Malware Config
Extracted
bitrat
1.38
policy-generating.at.ply.gg:48719
-
communication_password
81dc9bdb52d04dc20036dbd8313ed055
-
tor_process
tor
Signatures
-
Bitrat family
Files
-
8611507438.zip.zip
Password: infected
-
a373d064cabacfd615563b9f094ae79e051f8f481ebaade3acb662863662f359.exe windows x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 687KB - Virtual size: 686KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ