General

  • Target

    9b035bad2b8a21fb2c57fd784c89b8d5.zip

  • Size

    4.8MB

  • MD5

    64a7a6612bccb62bb840263d4cd80f9f

  • SHA1

    73c5c8029db46b5cb44c62258180fd369963f664

  • SHA256

    5bf9dba13b02a3ab17ff66bd3d4c0bffdbb707133d56882ba34f7c135db2323d

  • SHA512

    f3a70dc44d8bd0c8b01c5409204bb68483342203a397583d8fb42e2b5ed614956c075051249f1d2a14bb55fa3d0843e98b38b49404fbc2b69c58b187e992df8a

  • SSDEEP

    98304:shjZ+eiSZ7LA+WzafXhl0FDwYxNA48duC3u4FD72R4FjezWiRoTlG0oH0xU49:shTis0zYhKwQ+TDFD72mE5RoTlOH5i

Score
10/10

Malware Config

Extracted

Family

bitrat

Version

1.32

C2

7ix5nfolcp4ta4mk2dtihev73rw7d2edpbd5tp7sf7zgmpv66fpxnwqd.onion:80

Attributes
  • communication_password

    e10adc3949ba59abbe56e057f20f883e

  • tor_process

    dllhost

Signatures

  • BitRAT payload 1 IoCs
  • Bitrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9b035bad2b8a21fb2c57fd784c89b8d5.zip
    .zip

    Password: infected

  • 2d49873798ab5ee10992f377ebb27ee940b1f354b9ec4ebebe687177ea2b214c
    .exe windows:5 windows x86 arch:x86

    Password: infected

    ee29d956202a00089af753de40f7f116


    Headers

    Imports

    Sections