Overview

overview

10

Static

static

10

Setup.exe

windows7-x64

6

Setup.exe

windows10-1703-x64

6

Setup.exe

windows10-2004-x64

6

Setup.exe

windows11-21h2-x64

6

Resubmissions

25-01-2024 03:58

240125-ejgsyagahl 10

24-01-2024 14:30

240124-rvdxmscfb9 10

20-10-2021 17:33

211020-v4vtashdd3 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Setup.exe

  • Size

    523KB

  • MD5

    329acf4d6a5e735c1fd3b3fc6c77d3f3

  • SHA1

    932598a6dbd5eaa0bd7b2aabd16f9c5fab62d960

  • SHA256

    ebe82a7d2f2f9989a5e4ef6a4602a8224abdff7aef5baa6beacb5977c02ac3e0

  • SHA512

    1c4b78f03238bd6e01abd14794c78ab5a27daf32c6a7237e814740f81c5892f4353f1145c71ad4fd1c57f5675a2281645de3fa437d78c05d5cc24c02f41cf4b5

  • SSDEEP

    12288:v0Go57lOzaCdlwVnu/h2gPoxntMRWru3Yo6T9XPF1:v0Gm7lOmC6gPoxntMQru3YLRn

Score
10/10
loaderprivateloader

Malware Config

Extracted

Family

privateloader

C2

http://45.133.1.182/proxies.txt

http://45.133.1.107/server.txt

pastebin.com/raw/A7dSG1te

http://wfsdragon.ru/api/setStats.php

51.178.186.149

Signatures

  • Privateloader family
    privateloader
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Setup.exe
    .exe windows:6 windows x86 arch:x86

    0ee1febb6ddf0a3a76f96e1cf78daf0d


    Headers

    Imports

    Sections