General

  • Target

    4568-77-0x0000000000C30000-0x0000000000FFE000-memory.dmp

  • Size

    3.8MB

  • MD5

    c78272d094caf8af399f31e0a62c5424

  • SHA1

    d54ddfbfbcd7f1bebafb77487fa39ee6da106eb3

  • SHA256

    a004144d7b04c965a95243f8bfc7b642c22854db62242b9b37a99fef70d66d21

  • SHA512

    2884afef1e33c7d445120d971d6649c5f10790fd64882c40b4527bb06f0efccb199b8aff4b9abd58c6b06235bd607a80dab84bf409e3bc6716c6206cb9ceda24

  • SSDEEP

    98304:672ck+f9et3qsrhtuIgGJ/vm4ILcwPIx+FB:0Ca0zuIgoZx

Score
10/10

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

185.225.75.68:3569

Attributes
  • communication_password

    0edcbe7d888380c49e7d1dcf67b6ea6e

  • tor_process

    tor

Signatures

  • Bitrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4568-77-0x0000000000C30000-0x0000000000FFE000-memory.dmp
    .exe windows:5 windows x86


    Headers

    Sections