General

  • Target

    892834734712fe5bc7a6614be6972de1be2d74ad424ef47b2c701046e4912426.exe

  • Size

    403KB

  • MD5

    b8de3346a34f0fbe1f04d826a5e47b6e

  • SHA1

    8b19d7c56f78ce6ce055eeb1d412b446b59efa19

  • SHA256

    892834734712fe5bc7a6614be6972de1be2d74ad424ef47b2c701046e4912426

  • SHA512

    5125622113c5e4ea9be7390bbef0be5d8bf17b00022f39f50fff86170330acdca37368c338d815156b24af960ab2861efe6bf1281920c156891c9062e35c4f6f

  • SSDEEP

    6144:SqJj3bQ/UCg7m1ugavIv1pE0EAPMrGWsWDWidF0HQszCZ2Ftppb9Y81+k7pq7FL7:Sql3k/b1ugaUS2zts

Score
10/10

Malware Config

Extracted

Family

privateloader

C2

http://45.133.1.107/server.txt

pastebin.com/raw/A7dSG1te

http://wfsdragon.ru/api/setStats.php

51.178.186.149

Signatures

  • Privateloader family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 892834734712fe5bc7a6614be6972de1be2d74ad424ef47b2c701046e4912426.exe
    .exe windows:6 windows x86 arch:x86

    6256ca6fb1d33cce27dff272311e3072


    Headers

    Imports

    Sections