General

  • Target

    5cee7776c29a4dd090c9934b60603e13

  • Size

    1.0MB

  • MD5

    5cee7776c29a4dd090c9934b60603e13

  • SHA1

    852a13264f49f562f7eb4ca58fc44ae36635089e

  • SHA256

    2be92d7d191fc4c3499bc51ccf9a2c438233cfcde7fbe7b3557ae77892ac5508

  • SHA512

    5b480f8c401cda61580ba58b7e3db452a7e77e0dfa70d8779eb644c757c306262c808e8d2de276288fca00662918ebc0752f3c07809828b4b32dc7a97d32269c

  • SSDEEP

    12288:00lRfZEyufdBGp4MAuVE9RtyncxQRhJJzhoqgH5sB4dxHG64:0ExZoGp/ARhQRh9B4d3

Score
10/10

Malware Config

Extracted

Family

privateloader

C2

http://37.0.10.214/proxies.txt

http://37.0.10.244/server.txt

http://wfsdragon.ru/api/setStats.php

37.0.10.237

Signatures

  • Privateloader family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5cee7776c29a4dd090c9934b60603e13
    .exe windows:6 windows x86 arch:x86

    93fd4ae8d78e56fe707a53a5a49cf9e3


    Headers

    Imports

    Sections