Overview

overview

10

Static

static

10

3176-948-0...ry.exe

windows7-x64

1

3176-948-0...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3176-948-0x0000000000400000-0x00000000007CE000-memory.dmp

  • Size

    3.8MB

  • MD5

    e6a6f669986c4281ea6a96d952de7e5b

  • SHA1

    36fa66caad059f4a7f778c93e646bdfe99d41edd

  • SHA256

    972d1a78d15d6f652cc01d6e272d9eebd7a4af8c417e91d855c373e9bdcb425d

  • SHA512

    4c3aafdabdf60c6ce6dda13a5e3710ce495915e56de8acc0062ff1104ce3dc6ee9cc08d8df119f1f2799e85e44dcbe3777abdbd20ff8842518cc1027a3f3e5d2

  • SSDEEP

    98304:877Pmq33rE/JDLPWZADUGer7B6iY74M/mmlwXVZgFB:K+R/eZADUXR

Score
10/10
bitrat

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

pradeepprabhu705.ddns.net:313

Attributes
  • communication_password

    827ccb0eea8a706c4c34a16891f84e7b

  • tor_process

    tor

Signatures

  • Bitrat family
    bitrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3176-948-0x0000000000400000-0x00000000007CE000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections