Overview

overview

10

Static

static

10

4cfbdd8acd...9c.exe

windows7-x64

3

4cfbdd8acd...9c.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f74cae93c7d8a7870addc797260fe2376fb5879cdc689ee065ef54780915b5c

  • Size

    1.4MB

  • MD5

    7c2bd55060ce9be10fd01619d0b3cb83

  • SHA1

    a0d3602ae76073010fabbb6620970b8517289547

  • SHA256

    0f74cae93c7d8a7870addc797260fe2376fb5879cdc689ee065ef54780915b5c

  • SHA512

    311db357af242ca24d1e13e692e7b58e25cc576c80fc3a310f3ccfced58c9c7ae83ccdc1ac56dab728a29ac6f804149e6c798ed490838b75798bec37a45cd4f2

  • SSDEEP

    24576:b6I5nm2EO98vnHBoIKfB/uBDIzpoi6FxX8Q2vnc3vUwUqRfXVSwi5e5+H:u6wny7f5ConWXEcFUYf8wiM5+H

Score
10/10
loaderprivateloader

Malware Config

Extracted

Family

privateloader

C2

http://37.0.10.214/proxies.txt

http://37.0.10.244/server.txt

http://wfsdragon.ru/api/setStats.php

37.0.10.237

Signatures

  • Privateloader family
    privateloader
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f74cae93c7d8a7870addc797260fe2376fb5879cdc689ee065ef54780915b5c
    .zip

    Password: infected

  • 4cfbdd8acdc923beeca12d94f06d2f1632765434a2087df7ac803c254a0adf9c
    .exe windows:6 windows x86 arch:x86

    9589ad8837113b4b31a6a8a07cbda1f9


    Headers

    Imports

    Sections