bitrat | b2a8d0b4950ca420355a1dd65790e4a27be0cff50a19521eed878327d454d975 | Triage

Sharing

General

Target

b2a8d0b4950ca420355a1dd65790e4a27be0cff50a19521eed878327d454d975
Size

3.8MB
Sample

240320-vg2ckaec7t
MD5

4ea6a19405324ba21d34033402070f80
SHA1

d0f43fd5b26ac14135ba8a76a004f81ef1da6b34
SHA256

b2a8d0b4950ca420355a1dd65790e4a27be0cff50a19521eed878327d454d975
SHA512

90ecbe0f2b262d5e705a4f515751b35c95a11261573345f4b9981be85209d46bbbaed401f2ff1a5aacad7d523d62cbcb62c904e9958ee2d699b8d6e614e71987
SSDEEP

49152:zXUIEeZzdeh/c7p1rNdd+JNEj0ykdj21x1YhFlX4bA/Hg/11VzeLG/7wqNKB2VIr:zXrEeZzdhjuV/gd1VzsGUqNKTHvQeK6

Score

10^/10

bitrat trojan

Malware Config

Extracted

Family

bitrat

Version

1.35

C2

115.78.134.34:6606

Attributes

communication_password
dbfdd36114f44939483daf34a4649bf8
tor_process
tor

Targets

- Target
  
  b2a8d0b4950ca420355a1dd65790e4a27be0cff50a19521eed878327d454d975
- Size
  
  3.8MB
- MD5
  
  4ea6a19405324ba21d34033402070f80
- SHA1
  
  d0f43fd5b26ac14135ba8a76a004f81ef1da6b34
- SHA256
  
  b2a8d0b4950ca420355a1dd65790e4a27be0cff50a19521eed878327d454d975
- SHA512
  
  90ecbe0f2b262d5e705a4f515751b35c95a11261573345f4b9981be85209d46bbbaed401f2ff1a5aacad7d523d62cbcb62c904e9958ee2d699b8d6e614e71987
- SSDEEP
  
  49152:zXUIEeZzdeh/c7p1rNdd+JNEj0ykdj21x1YhFlX4bA/Hg/11VzeLG/7wqNKB2VIr:zXrEeZzdhjuV/gd1VzsGUqNKTHvQeK6
Score

10^/10

bitrat trojan
- BitRAT
  BitRAT is a remote access tool written in C++ and uses leaked source code from other families.
  trojan bitrat
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2