Resubmissions

09-04-2024 13:06

240409-qcaa3aba2z 10

09-04-2024 13:06

240409-qb91asba2y 10

09-04-2024 13:06

240409-qb9drsba2x 10

09-04-2024 13:06

240409-qb831afg26 10

28-08-2023 01:00

230828-bcmttsgb4v 10

General

  • Target

    03b9dd8b1e16ad5c2a605ad6b18493a7.bin

  • Size

    4.8MB

  • MD5

    109700d193697797637b4ced2afdb74e

  • SHA1

    3dde85662d63d2cd05b5ff0fac343154d95c0dc8

  • SHA256

    00ec62acc47ff0297165650e13074aa49207441ee32d6718e72c87ea3e5b817e

  • SHA512

    5033980fbebb1306ae39be2bd4b79f79b79789480f9b6d1e3f307610bd581030ea790ca6e0c35ab93d6b00f3b67b66e7c6584c9a4b09cd14b0eb3bea8b028a10

  • SSDEEP

    98304:TNeeFxfl8Q0AR5sJi9zF10BOja0eLjuW3xZW+fUZyDKPjl0AMPP+W:fN0q5hV0BOjYju4k+fKwnPPv

Score
10/10

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

tcki6mrrcnrt33qy52viv7m64y6hepkv646nnzglrkbgytyt6b2hdrid.onion:80

Attributes
  • communication_password

    827ccb0eea8a706c4c34a16891f84e7b

  • tor_process

    dllhost

Signatures

  • Bitrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 03b9dd8b1e16ad5c2a605ad6b18493a7.bin
    .zip

    Password: infected

  • 06f5ae2998205719e3541415641a8afc2f5d6877b50c860df066e0e95c7ed3f3.bin
    .exe windows:5 windows x86 arch:x86

    Password: infected

    2b817dc1b1849c6a436f0647be7673e0


    Headers

    Imports

    Sections