Overview

overview

10

Static

static

10

022e3c30a1...66.exe

windows7-x64

6

022e3c30a1...66.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44ffacde234b08a135e3f8887bcb61bc3101c83849b31ecb4fd6002901f7e2a1

  • Size

    159KB

  • Sample

    241106-v7kgqsvfmj

  • MD5

    346437a8bad32a31ed7d92f62a7d4bd9

  • SHA1

    9b1e109c549f689ea723870d84506af88f578637

  • SHA256

    44ffacde234b08a135e3f8887bcb61bc3101c83849b31ecb4fd6002901f7e2a1

  • SHA512

    b0b171cbce38b18d637501222a4267929ff0f74cc13b11886104e46d50aa11bee877fd6eaa23213c4b820d9ae698eb8a41aeb8c85e636de85d75cd4e07045a4d

  • SSDEEP

    3072:EULCUhT9JAn3Itf7MOctzg0oGYQQByb3oZGUlMp8yPJwJ6lQBwj218UF:v+GT9q3+TMX+0sy0ZJmSqUvR

Score
10/10
privateloaderdiscoveryloader

Malware Config

Extracted

Family

privateloader

C2

http://45.133.1.107/server.txt

pastebin.com/raw/A7dSG1te

http://wfsdragon.ru/api/setStats.php

51.178.186.149

Targets

    • Target

      022e3c30a1504fde93e24b2206f804a923ee9785e4db81a166939a1e7b928b66

    • Size

      403KB

    • MD5

      f957e397e71010885b67f2afe37d8161

    • SHA1

      a8bf84b971b37ac6e7f66c5e5a7e971a7741401e

    • SHA256

      022e3c30a1504fde93e24b2206f804a923ee9785e4db81a166939a1e7b928b66

    • SHA512

      8b5e9cb926fafc295c403c1fce7aa883db3a327e58c3295e9a081a8937bed28e305cca08c2c7d98080818095ea99bb4047e10aa2f61e3e4d6d965aef6d16a4f6

    • SSDEEP

      6144:ilwYPg/USg7WFugaqIv1pE0EAPMrGWsWDWidF0HQszCZ2Ftppb9Y81+k7pq7FLfj:iyYI/7FugaLS2zO

    Score
    6/10
    discovery

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks