General

  • Target

    91e994fe2f5d97c9c7a8267ac900bd08d66c6e997397d01ccd15c0b301d98ea3

  • Size

    3.8MB

  • Sample

    231014-ams8xsfe5s

  • MD5

    a7710e7f82db612edd7ec60885643899

  • SHA1

    80f1c546beb6c241bf038848fe4fae825c3d6cd0

  • SHA256

    91e994fe2f5d97c9c7a8267ac900bd08d66c6e997397d01ccd15c0b301d98ea3

  • SHA512

    fc481e172dfd88f69e4b6bdd25e2c0f26482f5d62feb15d397866569aea276f5a3d987af69b57f010eaae8ae2a9c74beeb44d07efed1f7caac6a6ee2a3225fba

  • SSDEEP

    98304:877Pmq33rE/JDLPWZADUGer7B6iY74M/AmlwXVZaFB:K+R/eZADUXR

Score
10/10

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

103.125.190.185:1234

Attributes
  • communication_password

    827ccb0eea8a706c4c34a16891f84e7b

  • tor_process

    tor

Targets

    • Target

      91e994fe2f5d97c9c7a8267ac900bd08d66c6e997397d01ccd15c0b301d98ea3

    • Size

      3.8MB

    • MD5

      a7710e7f82db612edd7ec60885643899

    • SHA1

      80f1c546beb6c241bf038848fe4fae825c3d6cd0

    • SHA256

      91e994fe2f5d97c9c7a8267ac900bd08d66c6e997397d01ccd15c0b301d98ea3

    • SHA512

      fc481e172dfd88f69e4b6bdd25e2c0f26482f5d62feb15d397866569aea276f5a3d987af69b57f010eaae8ae2a9c74beeb44d07efed1f7caac6a6ee2a3225fba

    • SSDEEP

      98304:877Pmq33rE/JDLPWZADUGer7B6iY74M/AmlwXVZaFB:K+R/eZADUXR

    Score
    5/10
    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks