General

  • Target

    7457af1d80e0d74da2055e2581f163ec_JaffaCakes118

  • Size

    7.7MB

  • MD5

    7457af1d80e0d74da2055e2581f163ec

  • SHA1

    a46d4af450632ae233b8057b2753ae0ec0098d51

  • SHA256

    c46ce63fee99ef6ee8eae245a5cb958dc8806c0d9cd73377402820712c398002

  • SHA512

    569ad807df437bd37aabbcc5d0a27172d70579df90cee6f33bffeea0a8c5efd7a35ce433bd2c8af08448bf8eeb9e01a395729efc65bfd91306b19bf7457465a0

  • SSDEEP

    196608:n1Kkhg1USVxwhzav1yo31CPwDv3uFZjeg2EeJUO9WLQkDxtw3iFFrS6XOfTV73c:1KkJ0xwZ6v1CPwDv3uFteg2EeJUO9WL2

Score
10/10

Malware Config

Extracted

Family

bitrat

Version

1.33

C2

eh3garw7zufw7d4ug22f5t6vp7ex5ivmw54ox5yxe4habthtq6zs7wid.onion:80

Attributes
  • communication_password

    e084daa1b3c6a01378ac0b9e5889beef

  • install_dir

    excelupdater

  • install_file

    excel.exe

  • tor_process

    toronion

Signatures

  • Bitrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7457af1d80e0d74da2055e2581f163ec_JaffaCakes118
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections