Overview

overview

10

Static

static

10

3060-54-0x...ry.exe

windows7-x64

1

3060-54-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    3060-54-0x0000000001330000-0x00000000019FB000-memory.dmp

  • Size

    6.8MB

  • MD5

    5bd3a596a96f968cb26b945929dde90c

  • SHA1

    b3826db6b978ab4f7a69bd18a745dd9753183c68

  • SHA256

    02a529b4d4d7aa5786dd5be4eaf3c32966b1f07aee0e4d801e438624b7e1edbd

  • SHA512

    f112fa78f72f0ee354da8bd9550ce2fd5c2e78d86b59675dcdf67bb03e8e6e1f107cc9c2df8a6f5a3746adbd3f231feac2c0f847867ccfeeac9c985dda120e64

  • SSDEEP

    196608:NDEjf7B1eCi9burg9LDGHkrXhavUo8+ziI1u/0Fj6g2:NDETnybzyHkrsMo8+Lwqx

Score
10/10
vmprotectprivateloader

Malware Config

Extracted

Family

privateloader

C2

1.1.1.1

Signatures

  • Privateloader family
    privateloader
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3060-54-0x0000000001330000-0x00000000019FB000-memory.dmp
    .exe windows x86


    Headers

    Sections