General
-
Target
Hogwarts Legacy by Empress.zip
-
Size
33.3MB
-
Sample
230218-1vnlhsda3x
-
MD5
e8ed4b7d48df78c2657c2b4414fe8a08
-
SHA1
55c5ddce39454e1a9570564703b2aa36faec33a4
-
SHA256
14bd04d358baa93e39f94953f4a5db0c9f3318081f75e1a8dfa287cb60774fa4
-
SHA512
fc5c2e934d4ada3d8ba2d5176d6dcf317030fa5c61473dd6af55ec41ca2326ebdb58db4321c74ac3330d26dbc709047f6d87670f96b7d13db219a84978fb73fc
-
SSDEEP
786432:KSlRNFY4cMHvAVS4idfTvNwkMb6y1m4fPLsX/LLWOv/:tKVS9dfTvikpy1m4foX/3
Static task
static1
Behavioral task
behavioral1
Sample
Hogwarts Legacy by Empress.zip
Resource
win10v2004-20221111-en
Malware Config
Extracted
purecrypter
http://comicmaster.org.uk/img/css/design/fabric/bo/Kvxut.dat
Targets
-
-
Target
Hogwarts Legacy by Empress.zip
-
Size
33.3MB
-
MD5
e8ed4b7d48df78c2657c2b4414fe8a08
-
SHA1
55c5ddce39454e1a9570564703b2aa36faec33a4
-
SHA256
14bd04d358baa93e39f94953f4a5db0c9f3318081f75e1a8dfa287cb60774fa4
-
SHA512
fc5c2e934d4ada3d8ba2d5176d6dcf317030fa5c61473dd6af55ec41ca2326ebdb58db4321c74ac3330d26dbc709047f6d87670f96b7d13db219a84978fb73fc
-
SSDEEP
786432:KSlRNFY4cMHvAVS4idfTvNwkMb6y1m4fPLsX/LLWOv/:tKVS9dfTvikpy1m4foX/3
Score10/10-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Executes dropped EXE
-
Adds Run key to start application
-