Overview

overview

10

Static

static

10

9c6bda87c9...18.exe

windows7-x64

5

9c6bda87c9...18.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9c6bda87c91a4bb5b1a70a76d7fe4486_JaffaCakes118

  • Size

    3.8MB

  • Sample

    240403-bwcszaca32

  • MD5

    9c6bda87c91a4bb5b1a70a76d7fe4486

  • SHA1

    1732841f6f297ee0e596e36252c799922acc74ad

  • SHA256

    8a82d9904985c9779c317052ad31585aacdf6b745b88a5ec3a8bcb697a8e9a8d

  • SHA512

    e959b556796c9d5c152a38ab94398c5c4b23522ee2c991d7587484f7899582da485aacff67bb3e4e47d47c99f6a4d235f4ab5c05de4d41880b8d55ddef4b71ec

  • SSDEEP

    98304:877Pmq33rE/JDLPWZADUGer7B6iY74M/ZmlwXVZaFB:K+R/eZADUXR

Score
10/10
bitrat

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

103.133.110.241:3390

Attributes
  • communication_password

    e10adc3949ba59abbe56e057f20f883e

  • tor_process

    tor

Targets

    • Target

      9c6bda87c91a4bb5b1a70a76d7fe4486_JaffaCakes118

    • Size

      3.8MB

    • MD5

      9c6bda87c91a4bb5b1a70a76d7fe4486

    • SHA1

      1732841f6f297ee0e596e36252c799922acc74ad

    • SHA256

      8a82d9904985c9779c317052ad31585aacdf6b745b88a5ec3a8bcb697a8e9a8d

    • SHA512

      e959b556796c9d5c152a38ab94398c5c4b23522ee2c991d7587484f7899582da485aacff67bb3e4e47d47c99f6a4d235f4ab5c05de4d41880b8d55ddef4b71ec

    • SSDEEP

      98304:877Pmq33rE/JDLPWZADUGer7B6iY74M/ZmlwXVZaFB:K+R/eZADUXR

    Score
    5/10

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks