privateloader | 55196b8016a6d8c41da9e66fbb3a9d4419ea6d6ba7496c1549a6a45025b6c44f | Triage

Submit
Reports

Overview

overview

Static

static

7

JaffaCakes...4f.exe

windows7-x64

JaffaCakes...4f.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_55196b8016a6d8c41da9e66fbb3a9d4419ea6d6ba7496c1549a6a45025b6c44f
Size

654.0MB
Sample

241226-x5zjzswncm
MD5

b02ddc562c43244674c596f272ba2cec
SHA1

9a8b6e1f8146b8fc9b8f4e282c349ab489e5f780
SHA256

55196b8016a6d8c41da9e66fbb3a9d4419ea6d6ba7496c1549a6a45025b6c44f
SHA512

9cbeebce1534a1ed095961c102d490b9fa88ea81275baa5c4f7619b17e58f1fd46ab59bfe0704e600bf5328b88ef7a2fb8b5b4e630c5ab42a71aa3bcd33a5a44
SSDEEP

98304:Iq37yMYRdfKP8m2dwkZIf+293hpeAOnqfjWvon2E/ngIeRqhI:I+PYjJzuCs+03beAmtont/JcqhI

Score

10^/10

privateloader discovery loader vmprotect

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_55196b8016a6d8c41da9e66fbb3a9d4419ea6d6ba7496c1549a6a45025b6c44f.exe

Resource

win7-20240903-en

privateloader discovery loader vmprotect

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_55196b8016a6d8c41da9e66fbb3a9d4419ea6d6ba7496c1549a6a45025b6c44f.exe

Resource

win10v2004-20241007-en

privateloader discovery loader vmprotect

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_55196b8016a6d8c41da9e66fbb3a9d4419ea6d6ba7496c1549a6a45025b6c44f
- Size
  
  654.0MB
- MD5
  
  b02ddc562c43244674c596f272ba2cec
- SHA1
  
  9a8b6e1f8146b8fc9b8f4e282c349ab489e5f780
- SHA256
  
  55196b8016a6d8c41da9e66fbb3a9d4419ea6d6ba7496c1549a6a45025b6c44f
- SHA512
  
  9cbeebce1534a1ed095961c102d490b9fa88ea81275baa5c4f7619b17e58f1fd46ab59bfe0704e600bf5328b88ef7a2fb8b5b4e630c5ab42a71aa3bcd33a5a44
- SSDEEP
  
  98304:Iq37yMYRdfKP8m2dwkZIf+293hpeAOnqfjWvon2E/ngIeRqhI:I+PYjJzuCs+03beAmtont/JcqhI
Score

10^/10

privateloader discovery loader vmprotect
- PrivateLoader
  PrivateLoader is a downloader sold as a pay-per-install malware distribution service.
  loader privateloader
- Privateloader family
  privateloader
- VMProtect packed file
  Detects executables packed with VMProtect commercial packer.
  vmprotect
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

privateloaderdiscoveryloadervmprotect

behavioral2

privateloaderdiscoveryloadervmprotect

© 2018-2025

Terms | Privacy