General
-
Target
cfc9e35e650fccb171caa30fd7db3f6b99a8a16e824fb3f6276526ff10e063cf
-
Size
41KB
-
Sample
230130-amn9zaag83
-
MD5
57323d497d6f276933dbadb713060d68
-
SHA1
9c7fcdc8e464815c5348312dca6210bc567dcf0e
-
SHA256
cfc9e35e650fccb171caa30fd7db3f6b99a8a16e824fb3f6276526ff10e063cf
-
SHA512
2f92ebf3534de46624bfdf6c8d48851026836c0d36e58cc83449e7927396d658f6c82d37680eda8af79e338b4ba63774f334b5dd58d50c430fe71af2540f5340
-
SSDEEP
768:K6uflwYtttWtYtYBtYtxqGGGGGGGGHGGGGGGGGGGGGGGGGGGGGGGGGGGGGUu8lXn:K6ZGGGGGGGGHGGGGGGGGGGGGGGGGGGGV
Behavioral task
behavioral1
Sample
cfc9e35e650fccb171caa30fd7db3f6b99a8a16e824fb3f6276526ff10e063cf.exe
Resource
win10-20220812-en
Malware Config
Extracted
purecrypter
http://185.106.94.146/Jgetwa.png
Targets
-
-
Target
cfc9e35e650fccb171caa30fd7db3f6b99a8a16e824fb3f6276526ff10e063cf
-
Size
41KB
-
MD5
57323d497d6f276933dbadb713060d68
-
SHA1
9c7fcdc8e464815c5348312dca6210bc567dcf0e
-
SHA256
cfc9e35e650fccb171caa30fd7db3f6b99a8a16e824fb3f6276526ff10e063cf
-
SHA512
2f92ebf3534de46624bfdf6c8d48851026836c0d36e58cc83449e7927396d658f6c82d37680eda8af79e338b4ba63774f334b5dd58d50c430fe71af2540f5340
-
SSDEEP
768:K6uflwYtttWtYtYBtYtxqGGGGGGGGHGGGGGGGGGGGGGGGGGGGGGGGGGGGGUu8lXn:K6ZGGGGGGGGHGGGGGGGGGGGGGGGGGGGV
Score10/10-
Detect PureCrypter injector
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
XMRig Miner payload
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-