Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220721-en -
resource tags
arch:x64arch:x86image:win10v2004-20220721-enlocale:en-usos:windows10-2004-x64system -
submitted
02-08-2022 16:26
Static task
static1
Behavioral task
behavioral1
Sample
59be2ebcf6516dd07ee5df8eae402523.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
59be2ebcf6516dd07ee5df8eae402523.exe
Resource
win10v2004-20220721-en
General
-
Target
59be2ebcf6516dd07ee5df8eae402523.exe
-
Size
386KB
-
MD5
59be2ebcf6516dd07ee5df8eae402523
-
SHA1
e4e5b949a0c9721e4c89f124750d8a97e4d96c7e
-
SHA256
d2952be5c81f4135c0953b7b36677704f24f4d780de268ce6b67a44a6f15419a
-
SHA512
9148e9a303a3562f9552da8fa6cdd3c1d4034be31d20968a8dc51904c0d4cf167c0cdfa0d6ceac0ec0a24a975b8c04de9a1d4d67f0056dce810ad4e5b83215d2
Malware Config
Extracted
privateloader
http://163.123.143.4/proxies.txt
http://193.233.177.215/server.txt
pastebin.com/raw/A7dSG1te
http://wfsdragon.ru/api/setStats.php
163.123.143.12
Signatures
-
PrivateLoader
PrivateLoader is a downloader sold as a pay-per-install malware distribution service.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/432-130-0x0000000000589000-0x00000000005AF000-memory.dmpFilesize
152KB
-
memory/432-131-0x00000000021E0000-0x0000000002239000-memory.dmpFilesize
356KB
-
memory/432-132-0x0000000000400000-0x000000000046C000-memory.dmpFilesize
432KB
-
memory/432-133-0x0000000000400000-0x000000000046C000-memory.dmpFilesize
432KB