Overview

overview

10

Static

static

44622abb2b...6a.exe

windows7-x64

10

44622abb2b...6a.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    44622abb2bd17b2c4734318dc5de7f6a.exe

  • Size

    2.9MB

  • Sample

    230127-rhvpmabe66

  • MD5

    44622abb2bd17b2c4734318dc5de7f6a

  • SHA1

    c9d2392a4660759b72bda955a76c4ffd198b4383

  • SHA256

    c8c503cad1ff92d608501ae76a4e9b6947580cf686d8867e8f060e37c1a1618a

  • SHA512

    158f90bc5ab6727a4b0dc63567b1a1375feb4d9e5afe83aa63d0c1c91f11445d04a44f87e34566c513ec221538f4c4c281db323c325fe9a8513ce394465f5784

  • SSDEEP

    49152:6aZXhxYiUWQ6ZMPFuqY6hYFJqlveNDhPpg5PvKM6E+mqp1p1KoHzx:jZRyiRQ6ZSuqXhcBNWXKBmqpj1bzx

Score
10/10
purecrypterdownloaderloaderpersistence

Malware Config

Targets

    • Target

      44622abb2bd17b2c4734318dc5de7f6a.exe

    • Size

      2.9MB

    • MD5

      44622abb2bd17b2c4734318dc5de7f6a

    • SHA1

      c9d2392a4660759b72bda955a76c4ffd198b4383

    • SHA256

      c8c503cad1ff92d608501ae76a4e9b6947580cf686d8867e8f060e37c1a1618a

    • SHA512

      158f90bc5ab6727a4b0dc63567b1a1375feb4d9e5afe83aa63d0c1c91f11445d04a44f87e34566c513ec221538f4c4c281db323c325fe9a8513ce394465f5784

    • SSDEEP

      49152:6aZXhxYiUWQ6ZMPFuqY6hYFJqlveNDhPpg5PvKM6E+mqp1p1KoHzx:jZRyiRQ6ZSuqXhcBNWXKBmqpj1bzx

    Score
    10/10
    purecrypterdownloaderloaderpersistence

    • Detect PureCrypter injector

      loader

    • PureCrypter

      PureCrypter is a .NET malware loader first seen in early 2021.

      loaderdownloaderpurecrypter

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks