General

  • Target

    2fa10132cfbce32a5ac7ee72c.exe

  • Size

    426KB

  • MD5

    2fa10132cfbce32a5ac7ee72c3587e8b

  • SHA1

    30d26416cd5eef5ef56d9790aacc1272c7fba9ab

  • SHA256

    cfb5c20ec8d95c35f7edb8743084d4491e43c62c575cf0102b4f6781c50689de

  • SHA512

    4e9338f89229bdddb5d7c803a415a338a75962e61ef47984a67efd1e81824ac14039d9abe2b26992a30f6d26c724058518849d71b6d1948c00b08ae95b0fd25a

  • SSDEEP

    12288:xvXtnFWEutqcMgPoxntMRWru3Yo6T9XP+b9:99TgPoxntMQru3YLRWb9

Score
10/10

Malware Config

Extracted

Family

privateloader

C2

http://45.133.1.182/proxies.txt

http://45.133.1.107/server.txt

pastebin.com/raw/A7dSG1te

http://wfsdragon.ru/api/setStats.php

51.178.186.149

Signatures

  • Privateloader family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2fa10132cfbce32a5ac7ee72c.exe
    .exe windows x86

    fcfbb183dda4a3825a0923650518721c


    Headers

    Imports

    Sections