Overview

overview

10

Static

static

10

HEUR-Troja...61.exe

windows7-x64

10

HEUR-Troja...61.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    HEUR-Trojan.Win32.Chapak.gen-774ae4107d461361.exe

  • Size

    776KB

  • MD5

    4b57ab30e2ecf878c6d980369432f957

  • SHA1

    356038e8406ceb627969f0b6e5156f5ab5fe6c1b

  • SHA256

    774ae4107d461361d672eb14e89dd4aec312cc1b880e7b24c0cbad40c774c0ce

  • SHA512

    40763ba59b673f8ddd9c786c466679f2f41ca74448bf96e14e348a2348df5e842daab74b67661f3088ee0804b416962f642f804808ba44d268b44f6176297475

  • SSDEEP

    12288:yyxALG6QhsYuu2Gjhqb7/JqNUn+URYbH3WMNCTPDAJK:yyxEWtqb7ANUn+9brNC/AJK

Score
10/10
loaderprivateloader

Malware Config

Extracted

Family

privateloader

C2

http://37.0.10.214/proxies.txt

http://37.0.10.244/server.txt

pastebin.com/raw/A7dSG1te

http://wfsdragon.ru/api/setStats.php

31.210.20.251

Signatures

  • Privateloader family
    privateloader
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • HEUR-Trojan.Win32.Chapak.gen-774ae4107d461361.exe
    .exe windows x86

    562361e739955c76ea1b133a50897c7a


    Headers

    Imports

    Sections