General
-
Target
File (2).exe
-
Size
6.3MB
-
Sample
230604-npw99acb27
-
MD5
7d234efc66d1315e508fb01b70ec2927
-
SHA1
16cb51f0f092282ca3917a896bd1e1cebda15395
-
SHA256
384d919904d8ef1dc6001f02d28a7118f89432f0eb3edcb0e317f67b96ddce51
-
SHA512
a016a0bfe48568d2d0989a1f65b7a1056f82731f9da53ea45a553e65b48b0f7474ddccb9c89c358ecd66d259f8b176bd5313fbd457c1201a985da5022cf9a384
-
SSDEEP
196608:gCLW2JcajKOEsgTOkJzSyaV0WJOxdQsLKB6rrpt:gCvbTEsgSkgyQ6dQse6rP
Static task
static1
Behavioral task
behavioral1
Sample
File (2).exe
Resource
win7-20230220-en
Malware Config
Targets
-
-
Target
File (2).exe
-
Size
6.3MB
-
MD5
7d234efc66d1315e508fb01b70ec2927
-
SHA1
16cb51f0f092282ca3917a896bd1e1cebda15395
-
SHA256
384d919904d8ef1dc6001f02d28a7118f89432f0eb3edcb0e317f67b96ddce51
-
SHA512
a016a0bfe48568d2d0989a1f65b7a1056f82731f9da53ea45a553e65b48b0f7474ddccb9c89c358ecd66d259f8b176bd5313fbd457c1201a985da5022cf9a384
-
SSDEEP
196608:gCLW2JcajKOEsgTOkJzSyaV0WJOxdQsLKB6rrpt:gCvbTEsgSkgyQ6dQse6rP
Score10/10-
PrivateLoader
PrivateLoader is a downloader sold as a pay-per-install malware distribution service.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Drops file in System32 directory
-