Overview

overview

10

Static

static

10

555.exe

windows10-1703-x64

10

out.exe

windows10-1703-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    555.exe

  • Size

    1.4MB

  • Sample

    230321-rrn87sch9y

  • MD5

    be3a6f123744a0e766dac337f69b4db1

  • SHA1

    2f1ab8ebeb853aa6696bfd50df6c360d7709bf96

  • SHA256

    3b5d3ee4924007c9d14360ff437c61288195d348c3f876e25629fd6aa9c5c9c0

  • SHA512

    73de60dcc105008e4b7937540433f442a4a073f481707dc19e42cab3362dd2a4792dfb7fd4451be32910851a644b24fcc85742d2f0f50bbd9951f4c7f34aa33f

  • SSDEEP

    24576:DndRKZCy2BrhCeU2i2cJijFbCBTPmiY05tJMSQp5ysA7Yg1nLkzh1fylB:LXDFBU2iIBb0xY/6sUYY8C

Score
10/10
bitrattrojanupx

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

220.247.167.232:5000

Attributes
  • communication_password

    827ccb0eea8a706c4c34a16891f84e7b

  • tor_process

    tor

Targets

    • Target

      555.exe

    • Size

      1.4MB

    • MD5

      be3a6f123744a0e766dac337f69b4db1

    • SHA1

      2f1ab8ebeb853aa6696bfd50df6c360d7709bf96

    • SHA256

      3b5d3ee4924007c9d14360ff437c61288195d348c3f876e25629fd6aa9c5c9c0

    • SHA512

      73de60dcc105008e4b7937540433f442a4a073f481707dc19e42cab3362dd2a4792dfb7fd4451be32910851a644b24fcc85742d2f0f50bbd9951f4c7f34aa33f

    • SSDEEP

      24576:DndRKZCy2BrhCeU2i2cJijFbCBTPmiY05tJMSQp5ysA7Yg1nLkzh1fylB:LXDFBU2iIBb0xY/6sUYY8C

    Score
    10/10
    bitrattrojanupx

    • BitRAT

      BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

      trojanbitrat

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1

    • Target

      out.upx

    • Size

      3.8MB

    • MD5

      e949f773f2ac6eea1d19d08645028d64

    • SHA1

      3a6dd2edcf9dde8724d1eedcd98950e0cda0477e

    • SHA256

      6515e0b517acecf6065eb581f7ae38b175dab3abdffb1b048b7451cbff7fa4ab

    • SHA512

      3f89c6d169299d9da97c5eae56208c4dedd920fc1b917c2b2ce3b2253911b13038b7f1bb6270a08615356211372e80d4d5c77058f5c150973db409f412bca827

    • SSDEEP

      98304:m77Pmq33rE/JDLPWZADUGer7B6iY74M/zmlwXVZ:Y+R/eZADUXR

    Score
    3/10
    behavioral2

MITRE ATT&CK Matrix

Tasks