purecrypter | cd7c2065e6fd3d81d85b8eb62c828292c291703d5dcde7511f3ae2c2c53e738c | Triage

Submit
Reports

Overview

overview

Static

static

winprofile

windows7-x64

winprofile

windows10-1703-x64

Sharing

General

Target

cd7c2065e6fd3d81d85b8eb62c828292c291703d5dcde7511f3ae2c2c53e738c
Size

2.4MB
Sample

230125-2arccaba89
MD5

a61ca48da85a9ca93ca3e2b846f49603
SHA1

e76f6120f4fee7fbee5243c9e3aa53c65cc3acbf
SHA256

cd7c2065e6fd3d81d85b8eb62c828292c291703d5dcde7511f3ae2c2c53e738c
SHA512

24aa2c189e1420ec6fc82a9e1e3e0a0a186f238758c2decabac950e8b08a305e306eacbe544eaf7dbeb2b7080f99ff0ad2c6f573f7262a13b11a549e0ae8511d
SSDEEP

49152:qfFfLewfpME45GDDqvI/Nd1xVovNyNqy3h3aiKT0wtKXtycqm2vfOtI:OFKwR25GDDr1sNyAyg/titynB3Oa

Score

10^/10

purecrypter downloader loader persistence

Static task

static1

Behavioral task

behavioral1

Sample

cd7c2065e6fd3d81d85b8eb62c828292c291703d5dcde7511f3ae2c2c53e738c.exe

Resource

win7-20221111-en

purecrypter downloader loader persistence

windows7-x64

10 signatures

300 seconds

Behavioral task

behavioral2

Sample

cd7c2065e6fd3d81d85b8eb62c828292c291703d5dcde7511f3ae2c2c53e738c.exe

Resource

win10-20220901-en

purecrypter downloader loader persistence

windows10-1703-x64

9 signatures

300 seconds

Malware Config

Targets

- Target
  
  cd7c2065e6fd3d81d85b8eb62c828292c291703d5dcde7511f3ae2c2c53e738c
- Size
  
  2.4MB
- MD5
  
  a61ca48da85a9ca93ca3e2b846f49603
- SHA1
  
  e76f6120f4fee7fbee5243c9e3aa53c65cc3acbf
- SHA256
  
  cd7c2065e6fd3d81d85b8eb62c828292c291703d5dcde7511f3ae2c2c53e738c
- SHA512
  
  24aa2c189e1420ec6fc82a9e1e3e0a0a186f238758c2decabac950e8b08a305e306eacbe544eaf7dbeb2b7080f99ff0ad2c6f573f7262a13b11a549e0ae8511d
- SSDEEP
  
  49152:qfFfLewfpME45GDDqvI/Nd1xVovNyNqy3h3aiKT0wtKXtycqm2vfOtI:OFKwR25GDDr1sNyAyg/titynB3Oa
Score

10^/10

purecrypter downloader loader persistence
- Detect PureCrypter injector
  loader
- PureCrypter
  PureCrypter is a .NET malware loader first seen in early 2021.
  loader downloader purecrypter
- Adds Run key to start application
  persistence
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

purecrypterdownloaderloaderpersistence

behavioral2

purecrypterdownloaderloaderpersistence

© 2018-2025

Terms | Privacy