Resubmissions

25-12-2023 18:51

231225-xhrkvsfacn 10

22-12-2023 13:19

231222-qk1g8afhfj 10

General

  • Target

    9f6320bf00534651025eccc0b86d3b86

  • Size

    1.6MB

  • MD5

    9f6320bf00534651025eccc0b86d3b86

  • SHA1

    c6f974a07dfee085dec81683314f0629f50b8127

  • SHA256

    c76140aa43ae8638fe712bd75ba0e432d005842befd70e4d87116c9d566a8e96

  • SHA512

    6057f42bd61f2d2f5d81704b53a5364da8c04f804cc274537fb8162322431348203c3cc6125de98baccc8a3604f46c7e154e3c23101ca5daf5cfe0ce8a9a439c

  • SSDEEP

    24576:FhF5GV7tqb7xAkmijauMug/iyFzb2DfsPV8A4C2vNI1cPdf8xZLGNfav9n:rLGTuxWiOuRg/iyFzb2QN83XfeYap

Score
10/10

Malware Config

Extracted

Family

privateloader

C2

http://37.0.10.214/proxies.txt

http://37.0.10.244/server.txt

http://wfsdragon.ru/api/setStats.php

37.0.10.237

Signatures

  • Privateloader family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9f6320bf00534651025eccc0b86d3b86
    .exe windows:6 windows x86 arch:x86

    94a38222f822f877e3097bc3f229e72a


    Headers

    Imports

    Sections