Extracted

• • Target

    MT-06752033.exe

  • Size

    197KB

  • MD5

    f1361a0c6bd51f1c50adf55e0c939099

  • SHA1

    45c22c0676a0ee4aa48c3361c28775e652049dc9

  • SHA256

    cda5ced44ec0c2e58d0f38f9fa63a87364cf9cebcd2d0e1a11626a8bb694703a

  • SHA512

    4ae1b7f3d055db7118106bef8008255318f65c25898517f4fb23c46ed3a9d9c4a5d1662b9bfcfa53506c2b9fef0a79145573c3b77c6a1883ca702488bd1f21b5

  • SSDEEP

    3072:FuYiMNRWiAn3tldPzBBzP/YXYtZ6w99auW:CbiAdldLPzHpl

  Score

  10^/10

  purecryptercollectiondownloaderloaderspywarestealer

  • Detect PureCrypter injector

    loader

  • PureCrypter

    PureCrypter is a .NET malware loader first seen in early 2021.

    loaderdownloaderpurecrypter

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Accesses Microsoft Outlook profiles

    collection

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext

  behavioral1behavioral2