Analysis
-
max time kernel
30s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
02-03-2023 14:28
General
-
Target
TTRES322023.exe
-
Size
6KB
-
MD5
f85feb08f3741cdf99507d8d961abf1d
-
SHA1
affada16c452478d79c9b356b0fcedf1b0032b4f
-
SHA256
11b0042c974567450ce2895c15455f58ead4f9b80d73c79b395db7f0a8bf9fd9
-
SHA512
972c59140fa0a61858d81b0dd7bf50ea6ec0b85faa1d7b50c2c6dd52c8b2eb0274fe666124f7879b5b2f1b4fc1aed9e4a76a820cd6aa720ad981af0a98dca727
-
SSDEEP
96:N2uEMz82IfnbA2yrLP3ZI5RZQDwKAu7dkTQiLzNt:NpkfnbA7LPZWTWwKaT5N
Score
10/10
Malware Config
Extracted
Family
purecrypter
C2
http://85.31.45.42/Vsrhv.dat
Signatures
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\TTRES322023.exe"C:\Users\Admin\AppData\Local\Temp\TTRES322023.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
-
Filesize
256KB
-
Filesize
256KB