General

  • Target

    3fdf21f7ad2430c552a8dc34c6fbaf82d95a0f44b9a7bd514d89ad3d074d345f

  • Size

    1.6MB

  • MD5

    afb53ed8919416e84de41add492e5e45

  • SHA1

    bd3ab93a28c9229018c3e80998ae30c6a1463416

  • SHA256

    3fdf21f7ad2430c552a8dc34c6fbaf82d95a0f44b9a7bd514d89ad3d074d345f

  • SHA512

    3f103188c078108314bd4fd26159447c17457ed758281f3f93d56689a01c334ce5906c35554eda8fff02cf25aa9fd9d205936924353726b414a69528e62558b7

  • SSDEEP

    24576:N7ww87NKA/lL60S/wOBlkZsqjnhMgeiCl7G0nehbGZpbD:NwtNf9u0SJBlkdDmg27RnWGj

Score
10/10

Malware Config

Extracted

Family

privateloader

C2

http://212.193.30.45/proxies.txt

http://212.193.30.29/server.txt

pastebin.com/raw/A7dSG1te

http://wfsdragon.ru/api/setStats.php

212.193.30.21

Attributes
  • payload_url

    https://vipsofts.xyz/files/mega.bmp

Signatures

Files

  • 3fdf21f7ad2430c552a8dc34c6fbaf82d95a0f44b9a7bd514d89ad3d074d345f
    .exe windows x86

    9734ba8626408cec04bb8fa7d8bb6e83


    Headers

    Imports

    Sections