Resubmissions

25-01-2024 03:58

240125-ejgsyagahl 10

24-01-2024 14:30

240124-rvdxmscfb9 10

20-10-2021 17:33

211020-v4vtashdd3 10

General

  • Target

    Setup.exe

  • Size

    523KB

  • Sample

    240124-rvdxmscfb9

  • MD5

    329acf4d6a5e735c1fd3b3fc6c77d3f3

  • SHA1

    932598a6dbd5eaa0bd7b2aabd16f9c5fab62d960

  • SHA256

    ebe82a7d2f2f9989a5e4ef6a4602a8224abdff7aef5baa6beacb5977c02ac3e0

  • SHA512

    1c4b78f03238bd6e01abd14794c78ab5a27daf32c6a7237e814740f81c5892f4353f1145c71ad4fd1c57f5675a2281645de3fa437d78c05d5cc24c02f41cf4b5

  • SSDEEP

    12288:v0Go57lOzaCdlwVnu/h2gPoxntMRWru3Yo6T9XPF1:v0Gm7lOmC6gPoxntMQru3YLRn

Score
10/10

Malware Config

Extracted

Family

privateloader

C2

http://45.133.1.182/proxies.txt

http://45.133.1.107/server.txt

pastebin.com/raw/A7dSG1te

http://wfsdragon.ru/api/setStats.php

51.178.186.149

Targets

    • Target

      Setup.exe

    • Size

      523KB

    • MD5

      329acf4d6a5e735c1fd3b3fc6c77d3f3

    • SHA1

      932598a6dbd5eaa0bd7b2aabd16f9c5fab62d960

    • SHA256

      ebe82a7d2f2f9989a5e4ef6a4602a8224abdff7aef5baa6beacb5977c02ac3e0

    • SHA512

      1c4b78f03238bd6e01abd14794c78ab5a27daf32c6a7237e814740f81c5892f4353f1145c71ad4fd1c57f5675a2281645de3fa437d78c05d5cc24c02f41cf4b5

    • SSDEEP

      12288:v0Go57lOzaCdlwVnu/h2gPoxntMRWru3Yo6T9XPF1:v0Gm7lOmC6gPoxntMQru3YLRn

    Score
    6/10
    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Matrix ATT&CK v13

Tasks