Overview

overview

10

Static

static

3

122341d7b4...d8.exe

windows7-x64

10

122341d7b4...d8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    122341d7b40c0ee5ad9eb4b5e56a5ed8

  • Size

    2.2MB

  • Sample

    231230-jav2esbben

  • MD5

    122341d7b40c0ee5ad9eb4b5e56a5ed8

  • SHA1

    c1c929d53da34787cfd8381b3ea6a3c2c1ba1a33

  • SHA256

    c3e53e28198dfe92caa7b46355f543dd18c0353ef42f2e28862682a79e863735

  • SHA512

    50051b14cd8cd755fe68bbce63050c9db5bb0769ef75025ea634785fdc5af77b307b955f84381d6eb7dc698be406581ac5af2165666b9c0e42e6519765c3d5af

  • SSDEEP

    49152:IODX0Ctbcjd/r7bDDjeDEngIJdaaT2imnlhLEyeHtwuSZNIQ:Ttb2HD1ngOTSnlBpCSuSZ

Score
10/10
bitratzgratrattrojan

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

firewall.publicvm.com:25874

Attributes
  • communication_password

    a20ba4fb329f7dc66c0dd3562e9f9984

  • tor_process

    tor

Targets

    • Target

      122341d7b40c0ee5ad9eb4b5e56a5ed8

    • Size

      2.2MB

    • MD5

      122341d7b40c0ee5ad9eb4b5e56a5ed8

    • SHA1

      c1c929d53da34787cfd8381b3ea6a3c2c1ba1a33

    • SHA256

      c3e53e28198dfe92caa7b46355f543dd18c0353ef42f2e28862682a79e863735

    • SHA512

      50051b14cd8cd755fe68bbce63050c9db5bb0769ef75025ea634785fdc5af77b307b955f84381d6eb7dc698be406581ac5af2165666b9c0e42e6519765c3d5af

    • SSDEEP

      49152:IODX0Ctbcjd/r7bDDjeDEngIJdaaT2imnlhLEyeHtwuSZNIQ:Ttb2HD1ngOTSnlBpCSuSZ

    Score
    10/10
    bitratzgratrattrojan

    • BitRAT

      BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

      trojanbitrat

    • Detect ZGRat V1

    • ZGRat

      ZGRat is remote access trojan written in C#.

      ratzgrat
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks