General

  • Target

    SecuriteInfo.com.Trojan.DownLoader40.40259.3271.29415.exe

  • Size

    34.0MB

  • MD5

    d76e2f1b2d9ee7709ab0309c5ca71955

  • SHA1

    5146d2934189b66333586086b91e871477618461

  • SHA256

    c5d9bb6910afb276598d18843a7acdefabcd5a9ac60e051e9d727e6b3a9a8359

  • SHA512

    047ff00c7b002e7149e34f2abab11e4ae5a95266143eb54597944b4ab87128980bf2f9fc2dfc31fdd50f1002c2f4579baac0120fc604c520d1cfb1433d6006cd

  • SSDEEP

    786432:mqGCvMC7g911UbXLs2F3CdLW3sSFvZGf9Kvfwo7e04iRE:mqGOMnEXLNlscvkkv4o7y6E

Score
10/10

Malware Config

Signatures

  • Privateloader family
  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • SecuriteInfo.com.Trojan.DownLoader40.40259.3271.29415.exe
    .exe windows:4 windows x86 arch:x86

    b1a57b635b23ffd553b3fd1e0960b2bd


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    8df26927f8978d4eb40ff179c0aa961b


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    738dc9bb91549f627cf1953c2000e1d6


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/KillProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    153027ec3b10bcea606b777657dd3402


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    ea9b3ea5cd9e2014ad3724e31f62cf5e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    f2ac1ab587d5531d5f1bf76c094aef4c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • EasyHook.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • EasyHook32.dll
    .dll windows:5 windows x86 arch:x86

    7b3b12ec5d4e8348e8bcab2c0454059c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • EasyHook64.dll
    .dll windows:6 windows x64 arch:x64

    89b3da907b6f3934c4f9994c2aa723d3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cef.pak
    .js
  • cef_100_percent.pak
  • cef_200_percent.pak
  • d3dcompiler_43.dll
    .dll windows:6 windows x86 arch:x86

    6ba7b0e4e74a8eea96dca4fffc88b859


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • d3dcompiler_47.dll
    .dll windows:10 windows x86 arch:x86

    323b4a980be6850b6d140bd6363118e2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • devtools_resources.pak
  • gameCore_cef.exe
    .exe windows:5 windows x86 arch:x86

    0e730887710d59d256191ecb6fb46e51


    Headers

    Imports

    Sections

  • icudtl.dat
  • lander.ini
  • libEGL.dll
    .dll windows:5 windows x86 arch:x86

    1f1ea96193635656f86269a5cfe486d0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    d965d87567563d5be903d8a8b1ea467c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • libcef.dll
    .dll windows:5 windows x86 arch:x86

    9d117b5efe02256e602fa880c1a29d0c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • liehuo.exe
    .exe windows:5 windows x86 arch:x86

    b5d675bc45be02805150afd33e6b3781


    Headers

    Imports

    Sections

  • natives_blob.bin
    .js
  • pepflashplayer.dll
    .dll windows:6 windows x86 arch:x86

    bf9dd7c95f070cdf9b688ecd2f0a4b6d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • snapshot_blob.bin
  • uninst.exe.nsis