General

  • Target

    2032-113-0x0000000000400000-0x00000000007E4000-memory.dmp

  • Size

    3.9MB

  • MD5

    fe086b97a68c1222396fc6c4bbd38989

  • SHA1

    2df4b8b4c788bccfbfb264f818d9d17d298238f9

  • SHA256

    04d08201935967790542eca18dcc38204b6833c3147fa1570e4f85826b2d0bdc

  • SHA512

    a73d445d1b360b70680fa0a59314813ce5464c4811a3a67137d6bbd97490d450d73967adf26aae9ffec32528b1798dfdfcb1b571eb336ec9cbadcc505ea27e2b

  • SSDEEP

    98304:A77Pmq33rE/JDLPWZADUGer7B6iY74M/bmlwXVZ:++R/eZADUXR

Score
10/10

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

bitratluckshinjisix130.freeddns.org:7011

Attributes
  • communication_password

    4688fcb37886b8fed122f9514ecbb5ea

  • tor_process

    tor

Signatures

  • Bitrat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 2032-113-0x0000000000400000-0x00000000007E4000-memory.dmp
    .exe windows x86


    Headers

    Sections