Resubmissions

07-02-2023 08:18

230207-j7fb8sad74 10

17-07-2022 06:07

220717-gvcdpshcej 10

20-05-2022 06:00

220520-gqsvwsdbc8 10

20-05-2022 05:59

220520-gpw6xsdaf3 1

General

  • Target

    Setup.bin.zip

  • Size

    217KB

  • MD5

    e56eb3da70df79b1a346a9a83e8d8d5d

  • SHA1

    9141052b1643772345ec1a8c3069ddc2f75b2cf0

  • SHA256

    79cdd6cff18909c04eee46ba120ddfebbbbc59d47efc23c8458e11c3faad3bb3

  • SHA512

    c9aba783f6e3a9bb10c93abe43f9717278fbd9ad3fdf182e16d10d6b226ddc0e126540ab354972e5a688b72eac73f4721fe26ad87c2182613e118095907439e4

  • SSDEEP

    6144:8VKegBU3og0DWAYCjP2e5m594aWIxJUnoroD:8VKeGg09frv5m59/LroD

Score
10/10

Malware Config

Extracted

Family

privateloader

C2

http://45.133.1.182/proxies.txt

http://45.133.1.107/server.txt

pastebin.com/raw/A7dSG1te

http://wfsdragon.ru/api/setStats.php

51.178.186.149

Signatures

Files

  • Setup.bin.zip
    .zip

    Password: infected

  • Setup.bin
    .exe windows x86

    Password: infected

    0ee1febb6ddf0a3a76f96e1cf78daf0d


    Headers

    Imports

    Sections