Overview

overview

10

Static

static

10

452-65-0x0...ry.exe

windows7-x64

1

452-65-0x0...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    452-65-0x0000000000400000-0x00000000007D2000-memory.dmp

  • Size

    3.8MB

  • MD5

    5e590ade7b2d6d11bb8a0a331aeeb16b

  • SHA1

    566b81a3ec63250f8088bfa85e233cd032be9834

  • SHA256

    c4884ca3251fb77783507debd67bfe7b46c7666a4bf6a4c61e09fe2eebaa2840

  • SHA512

    48cd8bb289f28e6a6e929db58a983970fb8d74325cb2b1b7b87f051b2040ee0d5deb5df11b9cd420a4df1de05490043879f8f1e32c38e0c82ea2b6c69bd58d3d

  • SSDEEP

    98304:l77Pmq33rE/JDLPWZADUGer7B6iY74M/bmlwXVZ:x+R/eZADUXR

Score
10/10
upxbitrat

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

193.233.132.136:4404

Attributes
  • communication_password

    93d93f0d629d26b535ee4c950717ab2b

  • tor_process

    tor

Signatures

  • Bitrat family
    bitrat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 452-65-0x0000000000400000-0x00000000007D2000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections