Analysis
- max time kernel
30s - max time network
35s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
- submitted
13/01/2023, 11:42
General
- Target BitShitBuilder.exe
- Size 10.5MB
- Sample230113-nt4vwscc7t
- SHA256 1e982fc30c7a64c12d18cc2d13a25085e9c8ee0fab379665c6d011539179a76f
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
- Suspicious use of NtSetInformationThreadHideFromDebugger 18 IoCs
- Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\BitShitBuilder.exe"C:\Users\Admin\AppData\Local\Temp\BitShitBuilder.exe"1⤵
- Loads dropped DLL
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
BitRAT_Lover.dll
memory/1332-132-0x0000000000400000-0x0000000001061000-memory.dmp
memory/1332-133-0x000000007FA70000-0x000000007FE41000-memory.dmp
memory/1332-135-0x000000001DFA0000-0x000000001DFB1000-memory.dmp
memory/1332-136-0x000000001DFC0000-0x000000001DFD1000-memory.dmp
memory/1332-137-0x0000000000400000-0x0000000001061000-memory.dmp
memory/1332-138-0x000000007FA70000-0x000000007FE41000-memory.dmp