Overview

overview

10

Static

static

10

86e4acffcd...8b.exe

windows7-x64

5

86e4acffcd...8b.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    86e4acffcd9334947bb1d6569526168b

  • Size

    3.8MB

  • Sample

    240201-1chybaggfr

  • MD5

    86e4acffcd9334947bb1d6569526168b

  • SHA1

    0f9394236052d88e3a5f8fc30f7045bd9b631672

  • SHA256

    0dd99be4d361bce89d52bd9152fa37ca21c9396e7275d8bcf5394ebea1101657

  • SHA512

    f81dfe8b08fe14e1fdc687ad351fe2111af99a24baad6434312279e28f44c3c33556545b373a58512ffbd4804055b5ea7d9fa39fbaad6bd41652822f2419763a

  • SSDEEP

    98304:877Pmq33rE/JDLPWZADUGer7B6iY74M/+mlwXVZaFB:K+R/eZADUXR

Score
10/10
bitrat

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

80.209.229.141:4898

Attributes
  • communication_password

    202cb962ac59075b964b07152d234b70

  • tor_process

    tor

Targets

    • Target

      86e4acffcd9334947bb1d6569526168b

    • Size

      3.8MB

    • MD5

      86e4acffcd9334947bb1d6569526168b

    • SHA1

      0f9394236052d88e3a5f8fc30f7045bd9b631672

    • SHA256

      0dd99be4d361bce89d52bd9152fa37ca21c9396e7275d8bcf5394ebea1101657

    • SHA512

      f81dfe8b08fe14e1fdc687ad351fe2111af99a24baad6434312279e28f44c3c33556545b373a58512ffbd4804055b5ea7d9fa39fbaad6bd41652822f2419763a

    • SSDEEP

      98304:877Pmq33rE/JDLPWZADUGer7B6iY74M/+mlwXVZaFB:K+R/eZADUXR

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks