General

  • Target

    e9571705ab3458c44f407abd73d20583_JaffaCakes118

  • Size

    3.8MB

  • MD5

    e9571705ab3458c44f407abd73d20583

  • SHA1

    a1c7f7689a279c56193f94deb37483dae30dd97e

  • SHA256

    5077111b1030c224e7f95035c72a76aaba1cdb91c941962f12a32ab733007b91

  • SHA512

    b81199cbe9086262e97b4565ddd2ddf74967a299c183ae4781259d4aa06f0f96c2aef6c5621b7f77d1d6c8577be9708311ab9ba510019635af8174b54e2316ae

  • SSDEEP

    98304:877Pmq33rE/JDLPWZADUGer7B6iY74M/2mlwXVZaFB:K+R/eZADUXR

Score
10/10

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

212.192.241.41:6841

Attributes
  • communication_password

    e72610b23aa4dbaeb87425418271ad12

  • tor_process

    tor

Signatures

  • Bitrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e9571705ab3458c44f407abd73d20583_JaffaCakes118
    .exe windows:5 windows x86 arch:x86

    71955ccbbcbb24efa9f89785e7cce225


    Headers

    Imports

    Sections