Analysis
-
max time kernel
143s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
28-02-2023 01:00
General
-
Target
1c35533679377e4109f5e79004ab6e92c45c0c65c2c5e779bf2be1315f271ee3.exe
-
Size
73KB
-
MD5
2499343e00b0855882284e37bf0fa327
-
SHA1
c2a0423639ed2031855848b975b8d72fc280d3c4
-
SHA256
1c35533679377e4109f5e79004ab6e92c45c0c65c2c5e779bf2be1315f271ee3
-
SHA512
f2a2098a479fb689fadc56489d58fb23799d6ea919878b9d3d2d9191ce7b36f337e7a485cf95dd67dfd9f1a8a0402478d952676f39313b039b2d16ec0f47aec8
-
SSDEEP
192:bHaw9pLdykY/P6/QOpSFIaMD43333333333333333IP33333333333333333333s:bHHpLdykOSf+zILEQA3Hus5rD/XgKy2
Score
10/10
Malware Config
Extracted
Family
purecrypter
C2
https://cents-ability.org/loader/uploads/withoutstartup_Mgvedmuk.png
Signatures
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\1c35533679377e4109f5e79004ab6e92c45c0c65c2c5e779bf2be1315f271ee3.exe"C:\Users\Admin\AppData\Local\Temp\1c35533679377e4109f5e79004ab6e92c45c0c65c2c5e779bf2be1315f271ee3.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
96KB
-
Filesize
256KB
-
Filesize
256KB