Analysis
-
max time kernel
114s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
21-02-2023 06:10
General
-
Target
a824d18b02ec70f3e1d8a976243e45eec0ee05d0997ae4784c5fee30ff54d721.exe
-
Size
10KB
-
MD5
0f559a2fdb41db66f71006630d032a2c
-
SHA1
b6defdb632798821a0c075d3267d7967b0d60bd4
-
SHA256
a824d18b02ec70f3e1d8a976243e45eec0ee05d0997ae4784c5fee30ff54d721
-
SHA512
d04d76d3338e7690e94922fbfce2178d39536147dd3c29b3bf19a27b32c459e6f8d63f64275ecef53329702bd6c514eae3a16ce7feadf4bd7eeaaef5818c67fd
-
SSDEEP
192:w3Jt/uV7xnGtuYFZflTqL/HL778XxLrAupWNUWV:0JuV7FouYjfxqL/HLcJAupWNUW
Score
10/10
Malware Config
Extracted
Family
purecrypter
C2
http://80.66.75.36/p-Jcalafhqob.dat
Signatures
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a824d18b02ec70f3e1d8a976243e45eec0ee05d0997ae4784c5fee30ff54d721.exe"C:\Users\Admin\AppData\Local\Temp\a824d18b02ec70f3e1d8a976243e45eec0ee05d0997ae4784c5fee30ff54d721.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
64KB
-
Filesize
40KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB