Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

Setup.exe

windows7-x64

6

Setup.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    56167ce2a246b4292b496fc8cc5829d2f182ab363c645b89678e73e8210aa37c

  • Size

    149KB

  • MD5

    9fc1019ff33c61d53d8489b795e47dfe

  • SHA1

    df2cfe705ada080e744e8cb674be3bb9dc85fcf8

  • SHA256

    56167ce2a246b4292b496fc8cc5829d2f182ab363c645b89678e73e8210aa37c

  • SHA512

    c213ea6ab8871c4adb71151788c02bbf16c7b9e5e5cfbf826a9ba70eef9f1d25975b4d73fa0036f5177de3bf674d7a8c036571e568d851e9b1f5e18e0f1f8104

  • SSDEEP

    3072:2beiGzqFFZ4VUayv/Ze6F06XL9GxRogdpEt66pufCVCrUJMBEnQeQ:tiGqFFZ4VUpHY6VpGx7KtP9uUaB0QeQ

Score
10/10
loaderprivateloader

Malware Config

Extracted

Family

privateloader

C2

http://45.133.1.107/server.txt

pastebin.com/raw/A7dSG1te

http://wfsdragon.ru/api/setStats.php

51.178.186.149

Signatures

  • Privateloader family
    privateloader
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 56167ce2a246b4292b496fc8cc5829d2f182ab363c645b89678e73e8210aa37c
    .zip

    Password: infected

  • Setup.bin
    .exe windows:6 windows x86 arch:x86

    6256ca6fb1d33cce27dff272311e3072


    Headers

    Imports

    Sections