Overview

overview

10

Static

static

194388494000_pdf.exe

windows7-x64

10

194388494000_pdf.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    194388494000_pdf.com

  • Size

    10.0MB

  • Sample

    230125-k7vbtshc3t

  • MD5

    694463cf1660b3ae188120328a1b93f8

  • SHA1

    90389ff9d5817b730e2d358d9fbc71b4a2942670

  • SHA256

    f1c9f70b73a3b62f0426336303fdaa110110600dfc56893dbd000837b58f41d0

  • SHA512

    c219164e256ae715823c96e47bbc00b682aeeecd80a17c150e52e0329639135cd59ca5ceab5f84406c808b81f9ece291eefd0cdecb02baa1de517ca48d876307

  • SSDEEP

    96:2GpKgeeUuHIMSz9FVLojDU7Rk0QCh8pbkPIjyxNezNtp:E8ToMqNLojD2xapQPIjo43

Score
10/10
purecrypterdownloaderloader

Malware Config

Targets

    • Target

      194388494000_pdf.com

    • Size

      10.0MB

    • MD5

      694463cf1660b3ae188120328a1b93f8

    • SHA1

      90389ff9d5817b730e2d358d9fbc71b4a2942670

    • SHA256

      f1c9f70b73a3b62f0426336303fdaa110110600dfc56893dbd000837b58f41d0

    • SHA512

      c219164e256ae715823c96e47bbc00b682aeeecd80a17c150e52e0329639135cd59ca5ceab5f84406c808b81f9ece291eefd0cdecb02baa1de517ca48d876307

    • SSDEEP

      96:2GpKgeeUuHIMSz9FVLojDU7Rk0QCh8pbkPIjyxNezNtp:E8ToMqNLojD2xapQPIjo43

    Score
    10/10
    purecrypterdownloaderloader

    • Detect PureCrypter injector

      loader

    • PureCrypter

      PureCrypter is a .NET malware loader first seen in early 2021.

      loaderdownloaderpurecrypter

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks