General

  • Target

    Install.exe

  • Size

    654.0MB

  • Sample

    230501-srzwdabd4w

  • MD5

    b02ddc562c43244674c596f272ba2cec

  • SHA1

    9a8b6e1f8146b8fc9b8f4e282c349ab489e5f780

  • SHA256

    55196b8016a6d8c41da9e66fbb3a9d4419ea6d6ba7496c1549a6a45025b6c44f

  • SHA512

    9cbeebce1534a1ed095961c102d490b9fa88ea81275baa5c4f7619b17e58f1fd46ab59bfe0704e600bf5328b88ef7a2fb8b5b4e630c5ab42a71aa3bcd33a5a44

  • SSDEEP

    98304:Iq37yMYRdfKP8m2dwkZIf+293hpeAOnqfjWvon2E/ngIeRqhI:I+PYjJzuCs+03beAmtont/JcqhI

Malware Config

Targets

    • Target

      Install.exe

    • Size

      654.0MB

    • MD5

      b02ddc562c43244674c596f272ba2cec

    • SHA1

      9a8b6e1f8146b8fc9b8f4e282c349ab489e5f780

    • SHA256

      55196b8016a6d8c41da9e66fbb3a9d4419ea6d6ba7496c1549a6a45025b6c44f

    • SHA512

      9cbeebce1534a1ed095961c102d490b9fa88ea81275baa5c4f7619b17e58f1fd46ab59bfe0704e600bf5328b88ef7a2fb8b5b4e630c5ab42a71aa3bcd33a5a44

    • SSDEEP

      98304:Iq37yMYRdfKP8m2dwkZIf+293hpeAOnqfjWvon2E/ngIeRqhI:I+PYjJzuCs+03beAmtont/JcqhI

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

    • Drops file in System32 directory

MITRE ATT&CK Matrix

Tasks