General

  • Target

    3e5ccb6dcbb35257f07ca1e59bde0fde

  • Size

    1.5MB

  • MD5

    3e5ccb6dcbb35257f07ca1e59bde0fde

  • SHA1

    39ecf0317a54a69a4454282984b1916787cf6154

  • SHA256

    4101bd379660a169d50442c9921d6fb0329620efbc5a163856c2f5e5f41e601c

  • SHA512

    0486d713d89e64e21a484a619fc4e2ecb8c36d700e7eac741d84e50e8be8b0e72e43eefacde15d09cace7107b7314caebea679b8fb5058ab63a8b1e707623e8e

  • SSDEEP

    24576:ifwDi9seUAsBeZYyYoMGYVl2Jjj/O3O3al5e6Lz4/9j3tC2lyUJaRyP:Zi9shedMfQGWal5ngFjdC2lcQP

Score
10/10

Malware Config

Extracted

Family

privateloader

C2

http://37.0.10.214/proxies.txt

http://37.0.10.244/server.txt

http://wfsdragon.ru/api/setStats.php

37.0.10.237

Signatures

  • Privateloader family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3e5ccb6dcbb35257f07ca1e59bde0fde
    .exe windows:6 windows x86 arch:x86

    9589ad8837113b4b31a6a8a07cbda1f9


    Headers

    Imports

    Sections