Overview

overview

10

Static

static

1

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    73e23e096558e7eb4f0744b44a7f2d2292a8290c12754c494c08d556982967c1

  • Size

    9.8MB

  • Sample

    240601-pg8trada39

  • MD5

    15e7cc568611decda017546e0deac552

  • SHA1

    d7462886312e041f012c43e2fb14ee5606904289

  • SHA256

    73e23e096558e7eb4f0744b44a7f2d2292a8290c12754c494c08d556982967c1

  • SHA512

    5697258633c454811ced175a581c7d95146b8f4ad2ebab0b6f599f956fc2ce113303c611ad3e471c33b8d86b918e758fb2948bb1d8bdb6a3ab7724769cdf4dca

  • SSDEEP

    196608:BpZ3JM1O0HEd+IJiOJL922WfnaQtIXmdLZirmxTItU40mWVZwfbGWqp:Bp81hkd+I4oRWSa74jMXH8M

Score
10/10
privateloaderevasionloader

Malware Config

Targets

    • Target

      73e23e096558e7eb4f0744b44a7f2d2292a8290c12754c494c08d556982967c1

    • Size

      9.8MB

    • MD5

      15e7cc568611decda017546e0deac552

    • SHA1

      d7462886312e041f012c43e2fb14ee5606904289

    • SHA256

      73e23e096558e7eb4f0744b44a7f2d2292a8290c12754c494c08d556982967c1

    • SHA512

      5697258633c454811ced175a581c7d95146b8f4ad2ebab0b6f599f956fc2ce113303c611ad3e471c33b8d86b918e758fb2948bb1d8bdb6a3ab7724769cdf4dca

    • SSDEEP

      196608:BpZ3JM1O0HEd+IJiOJL922WfnaQtIXmdLZirmxTItU40mWVZwfbGWqp:Bp81hkd+I4oRWSa74jMXH8M

    Score
    10/10
    privateloaderevasionloader

    • Modifies firewall policy service

      evasion

    • PrivateLoader

      PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

      loaderprivateloader

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks