General
-
Target
file.exe
-
Size
5.5MB
-
Sample
230208-vb9fzsda86
-
MD5
9121873bd05a2502fb304043ab81bb15
-
SHA1
eec417b46979b516d2a06dffc1eb3608513452e9
-
SHA256
8736141e72f26d636178ec23ac803503ae5cc19c291671e1f0b89a121240b84c
-
SHA512
2313b532ae87218a3dfd2fc174c9934eb796f41356feaf3d005dc151765d94e79415ab3bc8a4383fab4edce89251a53ca993587745464af737429ff9622b30cf
-
SSDEEP
98304:DV5ttqgbeFsrDsNAqH4Y++a2i9jbMK/144Pv0Y74K4uzQkfS4FsWEFUq6N:DLt1beFsQHMaqjQg4wv0Y74Kzck6uEFi
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
Malware Config
Targets
-
-
Target
file.exe
-
Size
5.5MB
-
MD5
9121873bd05a2502fb304043ab81bb15
-
SHA1
eec417b46979b516d2a06dffc1eb3608513452e9
-
SHA256
8736141e72f26d636178ec23ac803503ae5cc19c291671e1f0b89a121240b84c
-
SHA512
2313b532ae87218a3dfd2fc174c9934eb796f41356feaf3d005dc151765d94e79415ab3bc8a4383fab4edce89251a53ca993587745464af737429ff9622b30cf
-
SSDEEP
98304:DV5ttqgbeFsrDsNAqH4Y++a2i9jbMK/144Pv0Y74K4uzQkfS4FsWEFUq6N:DLt1beFsQHMaqjQg4wv0Y74Kzck6uEFi
-
PrivateLoader
PrivateLoader is a downloader sold as a pay-per-install malware distribution service.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-