Analysis
-
max time kernel
208s -
max time network
210s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
23-02-2023 08:33
General
-
Target
Payment___xls.exe
-
Size
7KB
-
MD5
cd766ac1acfc6365d1d826aa2fb6a691
-
SHA1
e5a70f024e980ef1798f931dd21201d521f62c21
-
SHA256
d0c7b1871dcff0b63e5363ba3ed275e0525704c3a44b622715be7de5fa6dc670
-
SHA512
ea282993edbc8caf56d24e23e14c066930a72dc8bb339fff44a48300f55bf8396b70b684e7ccad72cf2f4d62185b79fef2694d1e52225d0db1f29362a2f610e3
-
SSDEEP
96:4mFQgbeSBVLX50UFHCQViL8s6smNR5XsMRW592cPLEkdefRazNt:FFhySJHoLN6ZfNRW2EtQZc
Score
10/10
Malware Config
Extracted
Family
purecrypter
C2
https://carlcederlaw.com/thh/Ooujgro.dat
Signatures
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Payment___xls.exe"C:\Users\Admin\AppData\Local\Temp\Payment___xls.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
-
Filesize
256KB
-
Filesize
256KB