purecrypter | MRF-D_009_21-AW-Deck-General-tools-sent-to-office-on07[.]02[.]2023-pdf[.]exe

General

Target
MRF-D_009_21-AW-Deck-General-tools-sent-to-office-on07.02.2023-pdf.exe
Size 23KB
Sample230211-vvaf1adc22
SHA256 465a71fa9458ee9162610eae78424a2a3f75561af0a2ce10ab3e6afde10aa74c
MD5 8531ba62c67d13ce3ad94bcd42bb2c00
SHA1 a9cee94ac6fe7afd2f2647e08330ce47269c57d6
SHA512 a183e13a1c4231a702b7c560b69313684d08ffb46580cd3fbc3641e197560ee61d27ccd109ba457ceac33b62f1fed15a34d6fe0a67f3989b7bfe19f4e39f5c53
SSDEEP 96:mHoxS1E/nqEnkpB0gJ2YGkLtUzVHEHtA6xQkVbR9x5YSGOomjfjw5aBZ7bBlHWFU:y1E/jSOVYrLtF/6ObR9xFyajGaBZzHz
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

purecrypter

Malware Config

Extracted

Family

purecrypter

C2

https://onedrive.live.com/download?cid=BD9480D014FE52E5&resid=BD9480D014FE52E5%21380&authkey=AITcidcD1qd3mdU

Signatures

Purecrypter family
purecrypter

File Explorer

MRF-D_009_21-AW-Deck-General-tools-sent-to-office-on07.02.2023-pdf.exe

.exe 23KB

MRF-D_009_21-AW-Deck-General-tools-sent-to-office-on07.02.2023-pdf.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 465a71fa9458ee9162610eae78424a2a3f75561af0a2ce10ab3e6afde10aa74c
MD5 8531ba62c67d13ce3ad94bcd42bb2c00
SHA1 a9cee94ac6fe7afd2f2647e08330ce47269c57d6
SHA512 a183e13a1c4231a702b7c560b69313684d08ffb46580cd3fbc3641e197560ee61d27ccd109ba457ceac33b62f1fed15a34d6fe0a67f3989b7bfe19f4e39f5c53
SSDEEP 96:mHoxS1E/nqEnkpB0gJ2YGkLtUzVHEHtA6xQkVbR9x5YSGOomjfjw5aBZ7bBlHWFU:y1E/jSOVYrLtF/6ObR9xFyajGaBZzHz
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

11278

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing