General
-
Target
57323d497d6f276933dbadb713060d68.exe
-
Size
41KB
-
Sample
230130-pxxresca6t
-
MD5
57323d497d6f276933dbadb713060d68
-
SHA1
9c7fcdc8e464815c5348312dca6210bc567dcf0e
-
SHA256
cfc9e35e650fccb171caa30fd7db3f6b99a8a16e824fb3f6276526ff10e063cf
-
SHA512
2f92ebf3534de46624bfdf6c8d48851026836c0d36e58cc83449e7927396d658f6c82d37680eda8af79e338b4ba63774f334b5dd58d50c430fe71af2540f5340
-
SSDEEP
768:K6uflwYtttWtYtYBtYtxqGGGGGGGGHGGGGGGGGGGGGGGGGGGGGGGGGGGGGUu8lXn:K6ZGGGGGGGGHGGGGGGGGGGGGGGGGGGGV
Behavioral task
behavioral1
Sample
57323d497d6f276933dbadb713060d68.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
57323d497d6f276933dbadb713060d68.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
purecrypter
http://185.106.94.146/Jgetwa.png
Targets
-
-
Target
57323d497d6f276933dbadb713060d68.exe
-
Size
41KB
-
MD5
57323d497d6f276933dbadb713060d68
-
SHA1
9c7fcdc8e464815c5348312dca6210bc567dcf0e
-
SHA256
cfc9e35e650fccb171caa30fd7db3f6b99a8a16e824fb3f6276526ff10e063cf
-
SHA512
2f92ebf3534de46624bfdf6c8d48851026836c0d36e58cc83449e7927396d658f6c82d37680eda8af79e338b4ba63774f334b5dd58d50c430fe71af2540f5340
-
SSDEEP
768:K6uflwYtttWtYtYBtYtxqGGGGGGGGHGGGGGGGGGGGGGGGGGGGGGGGGGGGGUu8lXn:K6ZGGGGGGGGHGGGGGGGGGGGGGGGGGGGV
Score10/10-
Detect PureCrypter injector
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
XMRig Miner payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-