General

  • Target

    968-115-0x0000000000400000-0x00000000007E4000-memory.dmp

  • Size

    3.9MB

  • MD5

    999ba7d8c8a4c19a81b042e4404bd6a3

  • SHA1

    e611d60b85a34032b0b90f8a8364e75779c33119

  • SHA256

    eac028f348cb3cdeb795712d4fb401c3aa4c24c2d68ef0dc89e9093c6b58e2ae

  • SHA512

    32df406824bb3418ba0f20e240f6474942a61635319216d4a5c0e991d7d8567d0a5ff5a4b91b2d011ad999e71385a04e87b4bf9460473c3c689a5e8d1df497bd

  • SSDEEP

    98304:A77Pmq33rE/JDLPWZADUGer7B6iY74M/8mlwXVZ:++R/eZADUXR

Score
10/10

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

bitratluckshinjisix130.freeddns.org:7011

Attributes
  • communication_password

    4688fcb37886b8fed122f9514ecbb5ea

  • tor_process

    tor

Signatures

  • Bitrat family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

Files

  • 968-115-0x0000000000400000-0x00000000007E4000-memory.dmp
    .exe windows x86


    Headers

    Sections