Overview

overview

10

Static

static

2122180333...cc.exe

windows7_x64

10

2122180333...cc.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2122180333641dee3a0ef7b9966ef035dc010e9857867c247517fe4ec8f566cc

  • Size

    69KB

  • Sample

    220104-gde39saebq

  • MD5

    ba2b85a44c23769cc557586d9269996d

  • SHA1

    7ec436400772e3a1ee77ac99fb7fdb5679484ce3

  • SHA256

    2122180333641dee3a0ef7b9966ef035dc010e9857867c247517fe4ec8f566cc

  • SHA512

    3032f4e80e69831701e36c72230743e722e886376a526f047b2bd006a4d684f3f8a1c4d7eb8867536ed3a697c19f51ece1bb2c8ccbeda333d2eb38088a187183

Score
10/10
purplefox loaderdropperrootkitsuricatatrojan

Malware Config

Targets

    • Target

      2122180333641dee3a0ef7b9966ef035dc010e9857867c247517fe4ec8f566cc

    • Size

      69KB

    • MD5

      ba2b85a44c23769cc557586d9269996d

    • SHA1

      7ec436400772e3a1ee77ac99fb7fdb5679484ce3

    • SHA256

      2122180333641dee3a0ef7b9966ef035dc010e9857867c247517fe4ec8f566cc

    • SHA512

      3032f4e80e69831701e36c72230743e722e886376a526f047b2bd006a4d684f3f8a1c4d7eb8867536ed3a697c19f51ece1bb2c8ccbeda333d2eb38088a187183

    Score
    10/10
    purplefox loaderdropperrootkitsuricatatrojan

    • Detect PurpleFox Dropper

      Detect PurpleFox Dropper.

      dropper loader

    • Detect PurpleFox Rootkit

      Detect PurpleFox Rootkit.

      rootkit

    • PurpleFox

      PurpleFox is an exploit kit used to distribute other malware families and first seen in 2018.

      rootkittrojanpurplefox

    • suricata: ET MALWARE OneLouder EXE download possibly installing Zeus P2P

      suricata: ET MALWARE OneLouder EXE download possibly installing Zeus P2P

      suricata

    • suricata: ET MALWARE Probable OneLouder downloader (Zeus P2P) exe download

      suricata: ET MALWARE Probable OneLouder downloader (Zeus P2P) exe download

      suricata

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks