Overview
overview
7Static
static
7BitRAT/BitRAT.exe
windows10-2004-x64
7BitRAT/BitRAT.exe.xml
windows10-2004-x64
1BitRAT/Manual.pdf
windows10-2004-x64
1BitRAT/dat...xe.png
windows10-2004-x64
3BitRAT/dat...nc.exe
windows10-2004-x64
7BitRAT/dat..._1.dll
windows10-2004-x64
3BitRAT/dat...-6.dll
windows10-2004-x64
1BitRAT/dat...-6.dll
windows10-2004-x64
1BitRAT/dat...-6.dll
windows10-2004-x64
3BitRAT/dat...-1.dll
windows10-2004-x64
3BitRAT/dat..._1.dll
windows10-2004-x64
1BitRAT/dat...-0.dll
windows10-2004-x64
3BitRAT/dat...-1.dll
windows10-2004-x64
1BitRAT/dat...or.exe
windows10-2004-x64
3BitRAT/dat...b1.dll
windows10-2004-x64
3Analysis
-
max time kernel
134s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
26/03/2023, 21:48
Behavioral task
behavioral1
Sample
BitRAT/BitRAT.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral2
Sample
BitRAT/BitRAT.exe.xml
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
BitRAT/Manual.pdf
Resource
win10v2004-20230220-en
Behavioral task
behavioral4
Sample
BitRAT/data/media/icons/exe.png
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
BitRAT/data/modules/hvnc.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral6
Sample
BitRAT/data/tor/libcrypto-1_1.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
BitRAT/data/tor/libevent-2-1-6.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral8
Sample
BitRAT/data/tor/libevent_core-2-1-6.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
BitRAT/data/tor/libevent_extra-2-1-6.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral10
Sample
BitRAT/data/tor/libgcc_s_sjlj-1.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
BitRAT/data/tor/libssl-1_1.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral12
Sample
BitRAT/data/tor/libssp-0.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
BitRAT/data/tor/libwinpthread-1.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral14
Sample
BitRAT/data/tor/tor.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral15
Sample
BitRAT/data/tor/zlib1.dll
Resource
win10v2004-20230221-en
General
-
Target
BitRAT/data/modules/hvnc.exe
-
Size
47KB
-
MD5
d8aa0784ac3b8d7860b732a3e9f330b0
-
SHA1
391c08797fb35ab12326cd2c49a62ec27243f6f8
-
SHA256
ef34feff91c19c5fbca02fffb46420b912a9e4c8c043d41f044fd9a232335c8c
-
SHA512
1156bbf279f141a3259f1e03a44c2d8fb73b782d6c4f5cd773e0c44589033d72f2053ca462dbf575298ef4e69cbb5ef0547d54fe282236fe4f04a7ae1c7d7a30
-
SSDEEP
768:qAAx+jcvNh5l4Q+Rhn0VUWjkCeTjSkcrMVSvOv/BtUgPjQumGr7wHT/nU:qAAWeT6QK4tkckSu/BOgbxVErU
Malware Config
Signatures
-
resource yara_rule behavioral5/memory/2984-133-0x0000000000C60000-0x0000000000C85000-memory.dmp upx behavioral5/memory/2984-134-0x0000000000C60000-0x0000000000C85000-memory.dmp upx