Analysis
- max time kernel
150s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20230220-en - resource tags
- submitted
25/02/2023, 02:25
General
- Target aee15cf59502cb15f986c6dd67e106a5.exe
- Size 25KB
- Sample230225-cwn2nsbf41
- SHA256 6117bcb631fe98190f2a23cb1854690eba95e9b33d1cdaba222e9f8b17665319
Score
10/10
Malware Config
Extracted
Family
-
purecrypter
C2
-
http://argentum.com.br/well-known/acme-challenge/k/h/d/g/Pnhez.bmp
Signatures
- PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\aee15cf59502cb15f986c6dd67e106a5.exe"C:\Users\Admin\AppData\Local\Temp\aee15cf59502cb15f986c6dd67e106a5.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2200-133-0x00000000002D0000-0x00000000002DC000-memory.dmp
memory/2200-134-0x0000000004CA0000-0x0000000004CB0000-memory.dmp
memory/2200-135-0x0000000004CA0000-0x0000000004CB0000-memory.dmp