Overview

overview

10

Static

static

3

c609d25041...f3.exe

windows7-x64

10

c609d25041...f3.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6d4c3a4ff3637ec34f820172f897d476.bin

  • Size

    3.8MB

  • Sample

    231013-et978sfe77

  • MD5

    964ccec99ba8c7eebaefc2b9c5065311

  • SHA1

    b448a5c057505d5267b0539b7e847c414b055b30

  • SHA256

    91b808215c26b4b5cc6fedb6de78daa6b3a1bc0c5dfa20870bca2300905d70ba

  • SHA512

    c7ae1af4839241283bf178f24587e85625be46948298daebcd505bd626134d1d9adfa07ac33ecd0de48e3e5efbcf2350bd01e1d9203ee0eb42c66e0d8771c832

  • SSDEEP

    98304:3MZtnsFDKmNsxnMLvF6hA8yLV79TKU3DXeH:ktnsxKW6M6ArcUzuH

Score
10/10
bitrattrojan

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

185.225.75.68:3569

Attributes
  • communication_password

    0edcbe7d888380c49e7d1dcf67b6ea6e

  • tor_process

    tor

Targets

    • Target

      c609d25041b7c463a726027c99c0a264b1e77415612e445fc39cfc9aae9801f3.exe

    • Size

      3.8MB

    • MD5

      6d4c3a4ff3637ec34f820172f897d476

    • SHA1

      d53fe8f0ecb0536088ec9be5247ab6627baf31cb

    • SHA256

      c609d25041b7c463a726027c99c0a264b1e77415612e445fc39cfc9aae9801f3

    • SHA512

      1ff5f4b215bedf6824c9c1932b5e8dbcbb8e459ee2839c598cc0f955b2948e25c5ce834b963ee1cf6ea22954e9c1fa4b102f117808f6dc8a4891b36c37d7e894

    • SSDEEP

      98304:HjHNSk7Z95fznvi8pzJzTGVDr0io7x9JgDQssR:DtSk7hvi8pzkVnYwQ

    Score
    10/10
    bitrattrojan

    • BitRAT

      BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

      trojanbitrat

    • Executes dropped EXE

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Scheduled Task/Job

1
T1053

Persistence

Scheduled Task/Job

1
T1053

Privilege Escalation

Scheduled Task/Job

1
T1053

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks