privateloader | 94774640951fb0f28e787b2169660f9f9d992e5b2f060c07c7521a586b188ef8

General

Target
2026-10-02_1190f89a2447d3f53c781a938a5c35a7_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
Size 5.7MB
Sample261003-vr3ndaed57
SHA256 94774640951fb0f28e787b2169660f9f9d992e5b2f060c07c7521a586b188ef8
MD5 1190f89a2447d3f53c781a938a5c35a7
SHA1 bc00b2c4065bdbb8e741469cf7a50299e994ae6f
SHA512 30993dd73b9bf8327c7cf348585a2d71337d965b096cb3f952f0bc5911b33c2424c5a229ac2a2912a7999486bef3c485bbeb296c3a73d8fa090173459da1895b
SSDEEP 98304:/tSuMOINjO91x364DT+Tx4NVMFb/55PU/yOh0xTQWj:cMJtM9/5RwN0RQk
TLSH
T10F56C001BB85C5F1E5D201B0597AAB7A983DBE28573088C7A7D11D2A88312D37A37F5F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  2026-10-02_1190f89a2447d3f53c781a938a5c35a7_amadey_avoslocker_coinminer_darkgate_elex_glassworm_luca-stealer_lynx_magniber_njrat_revil
- Size 5.7MB
- SHA256 94774640951fb0f28e787b2169660f9f9d992e5b2f060c07c7521a586b188ef8
- MD5 1190f89a2447d3f53c781a938a5c35a7
- SHA1 bc00b2c4065bdbb8e741469cf7a50299e994ae6f
- SHA512 30993dd73b9bf8327c7cf348585a2d71337d965b096cb3f952f0bc5911b33c2424c5a229ac2a2912a7999486bef3c485bbeb296c3a73d8fa090173459da1895b
- SSDEEP 98304:/tSuMOINjO91x364DT+Tx4NVMFb/55PU/yOh0xTQWj:cMJtM9/5RwN0RQk
- TLSH
  T10F56C001BB85C5F1E5D201B0597AAB7A983DBE28573088C7A7D11D2A88312D37A37F5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

bootkit defense_evasion discovery privateloader loader persistence ransomware spyware stealer trojan
- Family: PrivateLoader
  PrivateLoader is a downloader sold as a pay-per-install malware distribution service.
  loader privateloader
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Unexpected DNS network traffic destination
  Network traffic to other servers than the configured DNS servers was detected on the DNS port.
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
- Writes to the Master Boot Record (MBR)
  Bootkits write to the MBR to gain persistence at a level below the operating system.
  bootkit persistence
- Drops file in System32 directory
behavioral1 behavioral2