Extracted

Extracted

Extracted

• • Target

    2b122f85cf860621631b430565495c65134cfb56233f92c8e9a4be509bbcead2

  • Size

    623KB

  • MD5

    1466fa44b8e9be35982e0c248c62248b

  • SHA1

    01ca7fc3bafca3b6362c084a5fa98cce03c4be2f

  • SHA256

    2b122f85cf860621631b430565495c65134cfb56233f92c8e9a4be509bbcead2

  • SHA512

    d0b97c7eabce818b143ccdb87adde6a201e404afe14cb282c109662257db8d0529583ad739eb9e72bba90fe2217fc34a40b37b94b916feaba010ed81eac2a265

  Score

  10^/10

  purplefoxsainbox loaderdropperloaderrootkittrojan

  • Detect PurpleFox Dropper

    Detect PurpleFox Dropper.

    dropper loader

  • Detect PurpleFox Rootkit

    Detect PurpleFox Rootkit.

    rootkit

  • PurpleFox

    PurpleFox is an exploit kit used to distribute other malware families and first seen in 2018.

    rootkittrojanpurplefox

  • Executes dropped EXE

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2