bitrat | 8e71b0bf7af69bb43405048951a96a826f8d15b35bcfcaf18230572966aeecee | Triage

Sharing

General

Target

8e71b0bf7af69bb43405048951a96a826f8d15b35bcfcaf18230572966aeecee
Size

3.8MB
Sample

240229-q1majaag71
MD5

6247c6d8d537d12f6f05fab7f20d2c77
SHA1

154b95d15a86eafeae17def803616808c77fa882
SHA256

8e71b0bf7af69bb43405048951a96a826f8d15b35bcfcaf18230572966aeecee
SHA512

12d64e25fa2d3dbd9034ec1ff8ca02e15788102ffbfcd174c1d0f84728719d6f149229dd2ef91c980bbaa62d1e6530da797e4c4ef90f9e3bed8d37edd598d727
SSDEEP

98304:o77Pmq33rE/JDLPWZADUGer7B6iY74M/fmlwXVZ4FB:2+R/eZADUXR

Score

10^/10

bitrat trojan

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

194.5.98.46:1180

Attributes

communication_password
c5b2cebf15b205503560c4e8e6d1ea78
tor_process
tor

Targets

- Target
  
  8e71b0bf7af69bb43405048951a96a826f8d15b35bcfcaf18230572966aeecee
- Size
  
  3.8MB
- MD5
  
  6247c6d8d537d12f6f05fab7f20d2c77
- SHA1
  
  154b95d15a86eafeae17def803616808c77fa882
- SHA256
  
  8e71b0bf7af69bb43405048951a96a826f8d15b35bcfcaf18230572966aeecee
- SHA512
  
  12d64e25fa2d3dbd9034ec1ff8ca02e15788102ffbfcd174c1d0f84728719d6f149229dd2ef91c980bbaa62d1e6530da797e4c4ef90f9e3bed8d37edd598d727
- SSDEEP
  
  98304:o77Pmq33rE/JDLPWZADUGer7B6iY74M/fmlwXVZ4FB:2+R/eZADUXR
Score

10^/10

bitrat trojan
- BitRAT
  BitRAT is a remote access tool written in C++ and uses leaked source code from other families.
  trojan bitrat
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2