General

  • Target

    9c6bda87c91a4bb5b1a70a76d7fe4486_JaffaCakes118

  • Size

    3.8MB

  • MD5

    9c6bda87c91a4bb5b1a70a76d7fe4486

  • SHA1

    1732841f6f297ee0e596e36252c799922acc74ad

  • SHA256

    8a82d9904985c9779c317052ad31585aacdf6b745b88a5ec3a8bcb697a8e9a8d

  • SHA512

    e959b556796c9d5c152a38ab94398c5c4b23522ee2c991d7587484f7899582da485aacff67bb3e4e47d47c99f6a4d235f4ab5c05de4d41880b8d55ddef4b71ec

  • SSDEEP

    98304:877Pmq33rE/JDLPWZADUGer7B6iY74M/ZmlwXVZaFB:K+R/eZADUXR

Score
10/10

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

103.133.110.241:3390

Attributes
  • communication_password

    e10adc3949ba59abbe56e057f20f883e

  • tor_process

    tor

Signatures

  • Bitrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9c6bda87c91a4bb5b1a70a76d7fe4486_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    71955ccbbcbb24efa9f89785e7cce225


    Headers

    Imports

    Sections