General

  • Target

    0x00070000000139f2-74.dat

  • Size

    137KB

  • MD5

    e88a59876ea9ad978cadc4fe3105f23f

  • SHA1

    aa3a48f01218b9d0e55c3629bb689b05d135d508

  • SHA256

    764cc1739087f72db37602c60fd7ec8303114f46c1c4a338fbf1ff3d9d181b03

  • SHA512

    9fe4fa68b35d14095be5e31098fcff6d7b6b4a409fbc2800051ce8a6525e0f8344675aa07cd39d2d081e32acd31d9a2eed081113e14e9c0d23c2d2f0e5b68419

  • SSDEEP

    3072:FwBKPsX1sZ0F+fR9OJh1wdcbWU4gaQ3Nu5U0zvTH9szqZqVQgE:OBks+Wq9OjXj4gt3Nu5ULWoRE

Score
10/10

Malware Config

Extracted

Family

privateloader

C2

http://212.193.30.45/proxies.txt

http://45.144.225.57/server.txt

http://wfsdragon.ru/api/setStats.php

2.56.59.42

Signatures

Files

  • 0x00070000000139f2-74.dat
    .exe windows x86

    bc4b6b8e37d12faf6676bc241503669a


    Headers

    Imports

    Sections