bitrat | 8a82d9904985c9779c317052ad31585aacdf6b745b88a5ec3a8bcb697a8e9a8d | Triage

Sharing

General

Target

9c6bda87c91a4bb5b1a70a76d7fe4486_JaffaCakes118
Size

3.8MB
Sample

240403-bwcszaca32
MD5

9c6bda87c91a4bb5b1a70a76d7fe4486
SHA1

1732841f6f297ee0e596e36252c799922acc74ad
SHA256

8a82d9904985c9779c317052ad31585aacdf6b745b88a5ec3a8bcb697a8e9a8d
SHA512

e959b556796c9d5c152a38ab94398c5c4b23522ee2c991d7587484f7899582da485aacff67bb3e4e47d47c99f6a4d235f4ab5c05de4d41880b8d55ddef4b71ec
SSDEEP

98304:877Pmq33rE/JDLPWZADUGer7B6iY74M/ZmlwXVZaFB:K+R/eZADUXR

Score

10^/10

bitrat

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

103.133.110.241:3390

Attributes

communication_password
e10adc3949ba59abbe56e057f20f883e
tor_process
tor

Targets

- Target
  
  9c6bda87c91a4bb5b1a70a76d7fe4486_JaffaCakes118
- Size
  
  3.8MB
- MD5
  
  9c6bda87c91a4bb5b1a70a76d7fe4486
- SHA1
  
  1732841f6f297ee0e596e36252c799922acc74ad
- SHA256
  
  8a82d9904985c9779c317052ad31585aacdf6b745b88a5ec3a8bcb697a8e9a8d
- SHA512
  
  e959b556796c9d5c152a38ab94398c5c4b23522ee2c991d7587484f7899582da485aacff67bb3e4e47d47c99f6a4d235f4ab5c05de4d41880b8d55ddef4b71ec
- SSDEEP
  
  98304:877Pmq33rE/JDLPWZADUGer7B6iY74M/ZmlwXVZaFB:K+R/eZADUXR
Score

5^/10
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2