Overview

overview

10

Static

static

10

212-148-0x...ry.exe

windows7-x64

1

212-148-0x...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    212-148-0x0000000000400000-0x00000000007CE000-memory.dmp

  • Size

    3.8MB

  • MD5

    ff7eaf7f0c329a55af3644541603a325

  • SHA1

    7551863f45f3cd737b81bab8377bbe5b3c0df685

  • SHA256

    824fcaacaf2210cc9a411fb61dde34d4471bc870f0fcf82cb87b343f64ca49b9

  • SHA512

    b25456ffbbfd97e3cfe86af7755cd4c192cddf7160013f74497e38244d891ba550157fb48c97da5a11bcc9f43a7224886bad2196d2d77b76580cac95cde6e25e

  • SSDEEP

    98304:d77Pmq33rE/JDLPWZADUGer7B6iY74M/zmlwXVZ4FB:5+R/eZADUXR

Score
10/10
bitrat

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

current-necessity.at.ply.gg:49446

Attributes
  • communication_password

    c5e4e64cc9384fda09aa232c1811af0e

  • install_dir

    MsSystemDriver

  • install_file

    MsMpEng

  • tor_process

    tor

Signatures

  • Bitrat family
    bitrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 212-148-0x0000000000400000-0x00000000007CE000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections