Overview

overview

10

Static

static

10

022e3c30a1...66.exe

windows7-x64

6

022e3c30a1...66.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44ffacde234b08a135e3f8887bcb61bc3101c83849b31ecb4fd6002901f7e2a1

  • Size

    159KB

  • MD5

    346437a8bad32a31ed7d92f62a7d4bd9

  • SHA1

    9b1e109c549f689ea723870d84506af88f578637

  • SHA256

    44ffacde234b08a135e3f8887bcb61bc3101c83849b31ecb4fd6002901f7e2a1

  • SHA512

    b0b171cbce38b18d637501222a4267929ff0f74cc13b11886104e46d50aa11bee877fd6eaa23213c4b820d9ae698eb8a41aeb8c85e636de85d75cd4e07045a4d

  • SSDEEP

    3072:EULCUhT9JAn3Itf7MOctzg0oGYQQByb3oZGUlMp8yPJwJ6lQBwj218UF:v+GT9q3+TMX+0sy0ZJmSqUvR

Score
10/10
loaderprivateloader

Malware Config

Extracted

Family

privateloader

C2

http://45.133.1.107/server.txt

pastebin.com/raw/A7dSG1te

http://wfsdragon.ru/api/setStats.php

51.178.186.149

Signatures

  • Privateloader family
    privateloader
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 44ffacde234b08a135e3f8887bcb61bc3101c83849b31ecb4fd6002901f7e2a1
    .zip

    Password: infected

  • 022e3c30a1504fde93e24b2206f804a923ee9785e4db81a166939a1e7b928b66
    .exe windows:6 windows x86 arch:x86

    6256ca6fb1d33cce27dff272311e3072


    Headers

    Imports

    Sections