General
- Target Setup.exe
- Size 523KB
- Sample240125-ejgsyagahl
- SHA256 ebe82a7d2f2f9989a5e4ef6a4602a8224abdff7aef5baa6beacb5977c02ac3e0
- MD5 329acf4d6a5e735c1fd3b3fc6c77d3f3
- SHA1 932598a6dbd5eaa0bd7b2aabd16f9c5fab62d960
- SHA512 1c4b78f03238bd6e01abd14794c78ab5a27daf32c6a7237e814740f81c5892f4353f1145c71ad4fd1c57f5675a2281645de3fa437d78c05d5cc24c02f41cf4b5
- SSDEEP 12288:v0Go57lOzaCdlwVnu/h2gPoxntMRWru3Yo6T9XPF1:v0Gm7lOmC6gPoxntMQru3YLRn
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
privateloader
C2
-
http://45.133.1.182/proxies.txt
-
http://45.133.1.107/server.txt
-
pastebin.com/raw/A7dSG1te
-
http://wfsdragon.ru/api/setStats.php
-
51.178.186.149
Targets
-
- Target Setup.exe
- Size 523KB
- SHA256 ebe82a7d2f2f9989a5e4ef6a4602a8224abdff7aef5baa6beacb5977c02ac3e0
- MD5 329acf4d6a5e735c1fd3b3fc6c77d3f3
- SHA1 932598a6dbd5eaa0bd7b2aabd16f9c5fab62d960
- SHA512 1c4b78f03238bd6e01abd14794c78ab5a27daf32c6a7237e814740f81c5892f4353f1145c71ad4fd1c57f5675a2281645de3fa437d78c05d5cc24c02f41cf4b5
- SSDEEP 12288:v0Go57lOzaCdlwVnu/h2gPoxntMRWru3Yo6T9XPF1:v0Gm7lOmC6gPoxntMQru3YLRn
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Legitimate hosting services abused for malware hosting/C2