Extracted

• • Target

    setupov16.exe

  • Size

    311.0MB

  • MD5

    325c0cd17d60199c68156aec055f234e

  • SHA1

    841bfe0376b4cd90cc38a3e1d4b982c5296cf4e2

  • SHA256

    657902569e11c460f3fc897b49549abb419f95dff5fc64f94e8949e332085215

  • SHA512

    23f4930e414d2ccb1b32dc82b86e8c421b1aac9d6894c45606b0b708ab6140dd10ab0180c3959d6ddde76d605cdec00cbe0f94f741c78c769eea46d23a8866e7

  • SSDEEP

    96:LmJQaxddLegL2RZBz+4O0OFKqWZkr8lGDwaYz2N924vBM4zNt:LmJJdLD2TNp3q1YQDDYzi9faa

  Score

  10^/10

  purecrypterdownloaderloader

  • PureCrypter

    PureCrypter is a .NET malware loader first seen in early 2021.

    loaderdownloaderpurecrypter

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Suspicious use of SetThreadContext

  behavioral1