Overview

overview

10

Static

static

10

1360-82-0x...ry.exe

windows7-x64

1360-82-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1360-82-0x0000000000400000-0x0000000000BD8000-memory.dmp

  • Size

    7.8MB

  • MD5

    54bb31dbd692a0d89cf8764065933931

  • SHA1

    07c710cef484368df4ea06d6c01709ad4930af5a

  • SHA256

    3dc6c95337af13d9fe20c9103162bde38e6331ba1f10b931c646d06da75cb646

  • SHA512

    cb8488477f313bc0d1dd182832d2f0b3f90d5e03ab6c389eb9136ff5211c5c96ad040f4eec2418b858fdf9d05dd9294ac64ea54324f4aa326e68d5b25ba71b46

  • SSDEEP

    196608:LIRcbH4jSteTGv2xwhzav1yo31CPwDv3uFZjeg2EeJUO9WLQkDxtw3iFFrS6XOf:LdHsfu2xwZ6v1CPwDv3uFteg2EeJUO9E

Score
10/10
bitrat

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

rxbwrzmdaw27pt7lrrhophwwlcyuqkw3n2dhpr5gu5bjh3ut2ot2mwid.onion:80

Attributes
  • communication_password

    5ffc3746012bb1139c6bf49107694c1a

  • tor_process

    Smartscreens

Signatures

  • Bitrat family
    bitrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1360-82-0x0000000000400000-0x0000000000BD8000-memory.dmp
    .exe windows x86


    Headers

    Sections