General
-
Target
AtmosphereLauncher.mal
-
Size
715.8MB
-
Sample
230211-w55kkaeh72
-
MD5
94b94d3d540398b7a5a3336d70d50194
-
SHA1
ceb17e1848c814f65722b6a4a546f9cb0aedd1d4
-
SHA256
6872346b1b51a9e0c9442fb7d4d03969af3ce7e60c1014fab0f35d8e5ca10417
-
SHA512
bc78d150768cb49dba1a84d18bec356ed7c6f997aa60dc815578a664ee76eeca643841944998b7059a1821fa1157c96201fd38461e23c0c36ae635fea6b3e5dc
-
SSDEEP
1536:Frae78zjORCDGwfdCSog01313pmIs5gf6s1POTQCcdxNqHHzs9lReMbP:LahKyd2n315s5c6s12TQ1NqHHzs9veML
Static task
static1
Behavioral task
behavioral1
Sample
AtmosphereLauncher.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
AtmosphereLauncher.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
purecrypter
https://www.franceconsobanque.fr/wp-admin/images/css/design/fabric/bo/Sjbgpxzi.bmp
Targets
-
-
Target
AtmosphereLauncher.mal
-
Size
715.8MB
-
MD5
94b94d3d540398b7a5a3336d70d50194
-
SHA1
ceb17e1848c814f65722b6a4a546f9cb0aedd1d4
-
SHA256
6872346b1b51a9e0c9442fb7d4d03969af3ce7e60c1014fab0f35d8e5ca10417
-
SHA512
bc78d150768cb49dba1a84d18bec356ed7c6f997aa60dc815578a664ee76eeca643841944998b7059a1821fa1157c96201fd38461e23c0c36ae635fea6b3e5dc
-
SSDEEP
1536:Frae78zjORCDGwfdCSog01313pmIs5gf6s1POTQCcdxNqHHzs9lReMbP:LahKyd2n315s5c6s12TQ1NqHHzs9veML
Score10/10-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-