Overview

overview

10

Static

static

10

3480-74-0x...ry.exe

windows7-x64

1

3480-74-0x...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3480-74-0x0000000000DB0000-0x000000000117E000-memory.dmp

  • Size

    3.8MB

  • MD5

    f4f7420ad966b203712f6e6dd8b02ce3

  • SHA1

    a9327b3ea42dd2d5aa376b806bac0e7f8040a925

  • SHA256

    7198a21dfb458875f802b8a8f1888dd17bebf3f72048b644899a84c648b24ce0

  • SHA512

    983c647426cfb5de9eaa812337ba33a103d6ed3ae3a23f7720ed6563d5162c9ec76bdf4bc2e81fb9e78dee991d451ab648aebb15637efbcd9d4155460d57da7a

  • SSDEEP

    98304:xhLYotHKDelcAwjn05+JG4fisrxtUZDEacFB:sQirT05+Jn

Score
10/10
bitrat

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

185.225.75.68:3569

Attributes
  • communication_password

    0edcbe7d888380c49e7d1dcf67b6ea6e

  • tor_process

    tor

Signatures

  • Bitrat family
    bitrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3480-74-0x0000000000DB0000-0x000000000117E000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections