General

  • Target

    2380-2-0x000000013F0D0000-0x000000013FF28000-memory.dmp

  • Size

    14.3MB

  • MD5

    7f8ef05391beaf004bb481b5973cbb18

  • SHA1

    cb6b33952a35fde11b2e8a79183d3bc1401c87ca

  • SHA256

    a61c87ad62c5f0c20ef55a2276afdb82b1e828c857e0762e343681b8d3edac54

  • SHA512

    48899d11f7c97ab26ea2331314c5cc2e4965dda994c6e1492c412453e1cd007bd3591765891c48bf0d71b90f48dd42f7fd460f13d3839dd86a4af705c54dd374

  • SSDEEP

    196608:/QvwDsd6nCFIEDB+X+mq4sucNfX5m0N5j9Wj6J/C6tpMcB1c/Sm7h2A71wod:ISQjAXPcNg0NZ9WOw6tphm7h

Malware Config

Signatures

  • Privateloader family
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2380-2-0x000000013F0D0000-0x000000013FF28000-memory.dmp
    .exe windows x64


    Headers

    Sections