General

  • Target

    build.zip

  • Size

    105.2MB

  • MD5

    3554c55eeb596cc5851ad158217333e2

  • SHA1

    72abebf7f7f610c455a00fb615a5fbd3c0029b83

  • SHA256

    a071d1ce9a8cf4a21694b50359ae79a96f7d0c60d979ae03d96c8a56d20e6715

  • SHA512

    d95654c35b73cfbd8ac80ebd7a57642d50e0a2f555f25f810c708227fcb1e7d22447287dd25b158bfaf0ce4bf12de0e19a205fdefb22e6214c932715dd2f1f0e

  • SSDEEP

    3145728:QAPdqKdgs2vDzGnubx23d5X6Ex74iK1sGMCZKVSv:QAP8xyw2vVK1FMoK4v

Malware Config

Signatures

  • Privateloader family
  • Detects Pyinstaller 2 IoCs
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • build.zip
    .zip
  • drawbot.exe
    .exe windows:6 windows x64 arch:x64

    4d0fb8dc9ee470058274f448bebbb85f


    Headers

    Imports

    Exports

    Sections

  • gui.exe
    .exe windows:5 windows x64 arch:x64

    69eb46a9f63edcc604b0bdaaa8e0f2f5


    Headers

    Imports

    Sections

  • gui.pyc
  • initializePositions.exe
    .exe windows:5 windows x64 arch:x64

    69eb46a9f63edcc604b0bdaaa8e0f2f5


    Headers

    Imports

    Sections

  • initializePositions.pyc
  • start.bat