Overview

overview

10

Static

static

10

fb46a7fb71...18.exe

windows7-x64

10

fb46a7fb71...18.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    fb46a7fb710bb84d274bd77993a094a2_JaffaCakes118
  • Size 3.8MB
  • Sample240419-13vd2agg76
  • SHA256 6548ac6fe1d508fddbcc21c79f64419986982826f2251aa7e664c08c076bf4dd
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
bitrattrojan

Malware Config

Extracted

Family

  • bitrat

Version

  • 1.38

C2

  • eter102.dvrlists.com:3050

Attributes
  • communication_password

    fea0f7015af40ae69a386f06f28a8d31

  • tor_process

    tor

Targets

    • Target
      fb46a7fb710bb84d274bd77993a094a2_JaffaCakes118
    • Size 3.8MB
    • SHA256 6548ac6fe1d508fddbcc21c79f64419986982826f2251aa7e664c08c076bf4dd
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    bitrattrojan

    • BitRAT

      BitRAT is a remote access tool written in C++ and uses leaked source code from other families.

      trojanbitrat

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks