Analysis
-
max time kernel
90s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
01-02-2023 06:36
General
-
Target
SETUP_~1.exe
-
Size
333.8MB
-
MD5
7ee2d8bdff477a70229b09c79af73064
-
SHA1
b884e751fd2bbe4b266fc707a2161b5ba02f4c45
-
SHA256
127775d506236d1d32070c66cc2dbc30bf2c0656ec68dcee676d055d697ad5bf
-
SHA512
20f74f1d8d8d3edac68febe35f02196483b581d565ab1a136da7c79084f478f53b4c503d308a7e92589cf7bfc92fc4bb510ff75fafbe4878420108611b46e4d6
-
SSDEEP
96:Tpb2e6SIJlQ/XjS4USGpcK0qz0plCGAYW0/9z6t42TFnU:TZsahUSGGKz0pC3M9z6HG
Score
10/10
Malware Config
Extracted
Family
purecrypter
C2
https://megalinkbj.com.br/images/img/css/www/soul/Bshya.jpeg
Signatures
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SETUP_~1.exe"C:\Users\Admin\AppData\Local\Temp\SETUP_~1.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
40KB