Overview

overview

10

Static

static

10

Setup.exe

windows7-x64

6

Setup.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    88d25e59f843a8af061802a9460a11a1662e5fb4

  • Size

    217KB

  • Sample

    241104-2yz96a1qhm

  • MD5

    3e66aceea4ebeee50ff967d3a06ff140

  • SHA1

    88d25e59f843a8af061802a9460a11a1662e5fb4

  • SHA256

    bf625b1705f381d9b4ef53a9b0b70ca2d6c255534ddbbec631af0b57ecc01731

  • SHA512

    b9726c63b8dc63a227d2ca8b009a378d3f172fb9d1c3cafb56b555fe17189a48639e4603b9c6e335bbf7feea0fedcf28fc4b1d536a56c0021e9fb95d94b85afa

  • SSDEEP

    6144:J1cHr5CrGYf4wWnfUup8S0tBI7RAPGQOKve:Wr4CYfrWn8uF0M1KNa

Score
10/10
privateloaderdiscoveryloader

Malware Config

Extracted

Family

privateloader

C2

http://45.133.1.182/proxies.txt

http://45.133.1.107/server.txt

pastebin.com/raw/A7dSG1te

http://wfsdragon.ru/api/setStats.php

51.178.186.149

Targets

    • Target

      Setup.bin

    • Size

      523KB

    • MD5

      329acf4d6a5e735c1fd3b3fc6c77d3f3

    • SHA1

      932598a6dbd5eaa0bd7b2aabd16f9c5fab62d960

    • SHA256

      ebe82a7d2f2f9989a5e4ef6a4602a8224abdff7aef5baa6beacb5977c02ac3e0

    • SHA512

      1c4b78f03238bd6e01abd14794c78ab5a27daf32c6a7237e814740f81c5892f4353f1145c71ad4fd1c57f5675a2281645de3fa437d78c05d5cc24c02f41cf4b5

    • SSDEEP

      12288:v0Go57lOzaCdlwVnu/h2gPoxntMRWru3Yo6T9XPF1:v0Gm7lOmC6gPoxntMQru3YLRn

    Score
    6/10
    discovery

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks