Overview

overview

10

Static

static

10

3880-4897-...ry.exe

windows7-x64

1

3880-4897-...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3880-4897-0x0000000000400000-0x00000000007CE000-memory.dmp

  • Size

    3.8MB

  • MD5

    b7e2c46fe93f1e95abed1269fc32eed1

  • SHA1

    b6d43e9c65f8e1c854e41b94e5ac75d2578f24a9

  • SHA256

    4504769b2b65d0cc8bb95a471a5289edbd786cb3f100ba7d9235430af95133b7

  • SHA512

    c702f24046648a2463dbcdf6315feec1b815ee08e0c8a80e7e717be1fe9af73d1e595287ff8f9893a5973a345e9b17ce114c31bc0aae8b6b8c1605a1288fc926

  • SSDEEP

    98304:d77Pmq33rE/JDLPWZADUGer7B6iY74M/tmlwXVZ3FB:5+R/eZADUXR

Score
10/10
bitrat

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

103.153.182.247:6161

Attributes
  • communication_password

    81dc9bdb52d04dc20036dbd8313ed055

  • install_dir

    Install path

  • install_file

    Install name

  • tor_process

    tor

Signatures

  • Bitrat family
    bitrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3880-4897-0x0000000000400000-0x00000000007CE000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections