General

  • Target

    abeea23c95c98bc3cbc6d9d4508a0a2f

  • Size

    392KB

  • MD5

    abeea23c95c98bc3cbc6d9d4508a0a2f

  • SHA1

    b9b202c2e2da2073b4e332a7401159118581d10c

  • SHA256

    df7734cbb1baf26783f02249ac1b725286ae3709233cb3e78955cb6873597e6d

  • SHA512

    6fb725f1e067382a2ff6e153f9a3f02fb9d277248cf1b06c0541feef3919d8813f18f54b25899d9d7f6e0651fcfeec7d98fee9300c404c8e04c0606712261d9f

  • SSDEEP

    12288:Mg1fPvbfKgWp3bQiTTbsqmMFigSPQ3quQ7OtnT:Mg1fPvberQiXQvyAPwXtn

Score
10/10

Malware Config

Extracted

Family

privateloader

C2

http://37.0.10.214/proxies.txt

http://37.0.10.244/server.txt

http://wfsdragon.ru/api/setStats.php

37.0.10.237

Attributes
  • payload_url

    https://vipsofts.xyz/files/mega.bmp

Signatures

  • Privateloader family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • abeea23c95c98bc3cbc6d9d4508a0a2f
    .exe windows:6 windows x86 arch:x86

    441ea5dabfec8fb454e631fa97f99e08


    Headers

    Imports

    Sections