General

  • Target
    046ca0cee23915bf236e53d0aa03b66f.exe
  • Size 6.8MB
  • Sample230807-jcc9dsfd7s
  • SHA256 4875a5a5dd058961caad327b2b718e01fbf2821e4873f13b85e790a09c371209
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      046ca0cee23915bf236e53d0aa03b66f.exe
    • Size 6.8MB
    • SHA256 4875a5a5dd058961caad327b2b718e01fbf2821e4873f13b85e790a09c371209
    • MD5 SHA1 SHA512 SSDEEP
    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks