Overview

overview

10

Static

static

10

Setup.exe

windows7-x64

6

Setup.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    88d25e59f843a8af061802a9460a11a1662e5fb4

  • Size

    217KB

  • MD5

    3e66aceea4ebeee50ff967d3a06ff140

  • SHA1

    88d25e59f843a8af061802a9460a11a1662e5fb4

  • SHA256

    bf625b1705f381d9b4ef53a9b0b70ca2d6c255534ddbbec631af0b57ecc01731

  • SHA512

    b9726c63b8dc63a227d2ca8b009a378d3f172fb9d1c3cafb56b555fe17189a48639e4603b9c6e335bbf7feea0fedcf28fc4b1d536a56c0021e9fb95d94b85afa

  • SSDEEP

    6144:J1cHr5CrGYf4wWnfUup8S0tBI7RAPGQOKve:Wr4CYfrWn8uF0M1KNa

Score
10/10
loaderprivateloader

Malware Config

Extracted

Family

privateloader

C2

http://45.133.1.182/proxies.txt

http://45.133.1.107/server.txt

pastebin.com/raw/A7dSG1te

http://wfsdragon.ru/api/setStats.php

51.178.186.149

Signatures

  • Privateloader family
    privateloader
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 88d25e59f843a8af061802a9460a11a1662e5fb4
    .zip

    Password: infected

  • Setup.bin
    .exe windows:6 windows x86 arch:x86

    0ee1febb6ddf0a3a76f96e1cf78daf0d


    Headers

    Imports

    Sections