General

  • Target

    00d07b1d2d4b1697e5c0964e68e61ec5

  • Size

    3.8MB

  • Sample

    231229-xc563agcg9

  • MD5

    00d07b1d2d4b1697e5c0964e68e61ec5

  • SHA1

    4515172894286770568694602b7384b3f35d8798

  • SHA256

    7184ecf9db3c6c15ab1b97ebe8b9124c9eb5b4f9f63e9da59f6b8c63d2ff5aef

  • SHA512

    cbf2664be07e854f7a80d0b04596f5728d12d055f357096ccd4d0131ec96ba67e5f70579a51be9fcb7ed0cb7c16b052840d8227b12a184fdec6b3efdfa19d7f2

  • SSDEEP

    98304:877Pmq33rE/JDLPWZADUGer7B6iY74M/UmlwXVZaFB:K+R/eZADUXR

Score
10/10

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

145.249.106.195:7355

Attributes
  • communication_password

    2e6b0c17cdf72c91f122da943361cf3d

  • tor_process

    tor

Targets

    • Target

      00d07b1d2d4b1697e5c0964e68e61ec5

    • Size

      3.8MB

    • MD5

      00d07b1d2d4b1697e5c0964e68e61ec5

    • SHA1

      4515172894286770568694602b7384b3f35d8798

    • SHA256

      7184ecf9db3c6c15ab1b97ebe8b9124c9eb5b4f9f63e9da59f6b8c63d2ff5aef

    • SHA512

      cbf2664be07e854f7a80d0b04596f5728d12d055f357096ccd4d0131ec96ba67e5f70579a51be9fcb7ed0cb7c16b052840d8227b12a184fdec6b3efdfa19d7f2

    • SSDEEP

      98304:877Pmq33rE/JDLPWZADUGer7B6iY74M/UmlwXVZaFB:K+R/eZADUXR

    Score
    5/10
    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks