General
-
Target
file.exe
-
Size
6.0MB
-
Sample
230205-nxvrdsce5s
-
MD5
bf667c3ade6a7ba7387d51169354f7d1
-
SHA1
7c53b6d7787b819b5eb69a5dfa7928facca9f5f5
-
SHA256
dfcf122e79221c9cf4aaf0271ab18bfc99dfaf8e7d5a3e563d3b012fd9246599
-
SHA512
520eaa0b2c01d31f3df321ec98c79132b0660923e165fd58eb9f270666e445e932c3931757251a852548dff98567cb344e2637d048623dae0e1c51293d31f384
-
SSDEEP
98304:Cbhs+g+8C3iXFLWCrRNtWYVgTwZPhmx9UEOYkmjuZXItQr55x277o7A:CNglgkFyuWRTwZBEMZX4Qr55s7+A
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
Malware Config
Targets
-
-
Target
file.exe
-
Size
6.0MB
-
MD5
bf667c3ade6a7ba7387d51169354f7d1
-
SHA1
7c53b6d7787b819b5eb69a5dfa7928facca9f5f5
-
SHA256
dfcf122e79221c9cf4aaf0271ab18bfc99dfaf8e7d5a3e563d3b012fd9246599
-
SHA512
520eaa0b2c01d31f3df321ec98c79132b0660923e165fd58eb9f270666e445e932c3931757251a852548dff98567cb344e2637d048623dae0e1c51293d31f384
-
SSDEEP
98304:Cbhs+g+8C3iXFLWCrRNtWYVgTwZPhmx9UEOYkmjuZXItQr55x277o7A:CNglgkFyuWRTwZBEMZX4Qr55s7+A
-
PrivateLoader
PrivateLoader is a downloader sold as a pay-per-install malware distribution service.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-