General

  • Target

    d74d2d384f1299ad1d4c95ff862bee34aca4bfe03f416dfefc64c2106e18f1e0

  • Size

    3.8MB

  • MD5

    e376ec4ae5c103889066b13c6f16a60f

  • SHA1

    10485b870011cc685750cc8694ed9f8e602d966e

  • SHA256

    d74d2d384f1299ad1d4c95ff862bee34aca4bfe03f416dfefc64c2106e18f1e0

  • SHA512

    b53ff2123001c55a939de7462fb309069e097f6a06148c4d4c5a1711b293e1dcd490fad793aac1ba38e2e392c9cf9c876121368a8033c9a9fb9bbc497db30799

  • SSDEEP

    98304:877Pmq33rE/JDLPWZADUGer7B6iY74M/HmlwXVZaFB:K+R/eZADUXR

Score
10/10

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

185.157.162.126:443

Attributes
  • communication_password

    a76d949640a165da25ccfe9a8fd82c8a

  • tor_process

    tor

Signatures

  • Bitrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d74d2d384f1299ad1d4c95ff862bee34aca4bfe03f416dfefc64c2106e18f1e0
    .exe windows x86

    71955ccbbcbb24efa9f89785e7cce225


    Headers

    Imports

    Sections