Extracted

• • Target

    Hogwarts Legacy by Empress.rar

  • Size

    29.7MB

  • MD5

    75501e17ea7127a3580a5617a33556ea

  • SHA1

    03a41a82643aff68c5f3e5a2308fdf3019155a94

  • SHA256

    74fadfd0039df927ba6ee5cfa3b6cae8848146b0725b1efe3d00e11384f46a93

  • SHA512

    c76dc7f8d0f5f809024ef59bd26abfb21b54478133e8ad8f3117f9762e96532b109848a35ea798952f4138cbe0cba25571ec8c030cf3fd7d36c18c4fdac31371

  • SSDEEP

    786432:st2vfAqmU9xAAP+wKYvAb314QQ4VUqTjCG0JuHPyOL8azdR:sGnxY732QQ4VleGbyO7zj

  Score

  10^/10

  purecrypterdownloaderloaderpersistence

  • PureCrypter

    PureCrypter is a .NET malware loader first seen in early 2021.

    loaderdownloaderpurecrypter

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Adds Run key to start application

    persistence
  behavioral1