Overview

overview

10

Static

static

10

31db72bcc1...18.exe

windows7-x64

10

31db72bcc1...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    31db72bcc1cd98d69e9b91a63b061c0e_JaffaCakes118

  • Size

    1.4MB

  • MD5

    31db72bcc1cd98d69e9b91a63b061c0e

  • SHA1

    c84563b56088acb3c1bd9435bb264576509285a1

  • SHA256

    b610d1ae855f79028cabdbd3c1160bc330ef68a7f30ab5544d00b09af341cc68

  • SHA512

    415cfbbbb3d459061679cf15cc74bd9a45af2935624466e6f2d163693543475354fd200ba01a1bfd84979ea6e10a0c5e7dc6b771cfaf5380a8f9dea8138d898f

  • SSDEEP

    24576:DndRKZCy2BrhCeU2i2cJijFbCBTPmiY05tJMSQp5ysA7Yg1nLkzgZ3y9uunqP:LXDFBU2iIBb0xY/6sUYY5ZC9n0

Score
10/10
upxbitrat

Malware Config

Extracted

Family

bitrat

Version

1.38

C2

microupdate.securitytactics.com:9999

Attributes
  • communication_password

    d9909824688daaad46d441eefd81eb38

  • install_dir

    Solitare

  • install_file

    NRT.exe

  • tor_process

    tor

Signatures

  • Bitrat family
    bitrat
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 31db72bcc1cd98d69e9b91a63b061c0e_JaffaCakes118
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections