General

  • Target

    ac3e25e9f7caf0de7997d66b4e746e84

  • Size

    3.8MB

  • Sample

    240228-s5ateafb78

  • MD5

    ac3e25e9f7caf0de7997d66b4e746e84

  • SHA1

    b5a4abcb51121714de299ae59696b5bcf3c5f969

  • SHA256

    adced62cc3699104fccf02298ae0743e49f11c51bbd6ebea524a785ec82cb5a1

  • SHA512

    e00e1a393d5e1845295c1d8c29626375892b282ae902df0f98e8133c7b025028e20eeed34e7deb15ef3ca18f5bdfe7c33989cc784103049faa2a6ac7d2156f2f

  • SSDEEP

    98304:877Pmq33rE/JDLPWZADUGer7B6iY74M/jmlwXVZaFB:K+R/eZADUXR

Score
10/10

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

19008198.ddns.net:5555

Attributes
  • communication_password

    0c2b3ceace1631ba00c206b6d687c7de

  • tor_process

    tor

Targets

    • Target

      ac3e25e9f7caf0de7997d66b4e746e84

    • Size

      3.8MB

    • MD5

      ac3e25e9f7caf0de7997d66b4e746e84

    • SHA1

      b5a4abcb51121714de299ae59696b5bcf3c5f969

    • SHA256

      adced62cc3699104fccf02298ae0743e49f11c51bbd6ebea524a785ec82cb5a1

    • SHA512

      e00e1a393d5e1845295c1d8c29626375892b282ae902df0f98e8133c7b025028e20eeed34e7deb15ef3ca18f5bdfe7c33989cc784103049faa2a6ac7d2156f2f

    • SSDEEP

      98304:877Pmq33rE/JDLPWZADUGer7B6iY74M/jmlwXVZaFB:K+R/eZADUXR

    Score
    5/10
    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix

Tasks