General

  • Target

    a3cf0ee3245538f461f0efa1b292a666d9e0f4283171abc265a645788193da56.exe

  • Size

    86KB

  • Sample

    230405-m6pfasdh93

  • MD5

    032a3d2901dc768d4278f77e374c612e

  • SHA1

    418ddb4482611b4e8da94c6b670a98b1c8c2d6fb

  • SHA256

    a3cf0ee3245538f461f0efa1b292a666d9e0f4283171abc265a645788193da56

  • SHA512

    d867657ff514ec2aeea0454df8be7ef5d8561c0f29e0101bf721a9ab220e2a5ede60b02608e403afdc5efa9eeca96ef7f3a6b60640dd6594adcea3b12a849b51

  • SSDEEP

    1536:lnVZxHC4Fo9jGPoCGVjGWmt8CXZ+63x+w4JD+0NL+fKX:9Jr+GPo9St8WHxSD+09+SX

Malware Config

Extracted

Family

purecrypter

C2

http://puresvr01.sytes.net/dashboard/panel/uploads/Afxufottv.bmp

Targets

    • Target

      a3cf0ee3245538f461f0efa1b292a666d9e0f4283171abc265a645788193da56.exe

    • Size

      86KB

    • MD5

      032a3d2901dc768d4278f77e374c612e

    • SHA1

      418ddb4482611b4e8da94c6b670a98b1c8c2d6fb

    • SHA256

      a3cf0ee3245538f461f0efa1b292a666d9e0f4283171abc265a645788193da56

    • SHA512

      d867657ff514ec2aeea0454df8be7ef5d8561c0f29e0101bf721a9ab220e2a5ede60b02608e403afdc5efa9eeca96ef7f3a6b60640dd6594adcea3b12a849b51

    • SSDEEP

      1536:lnVZxHC4Fo9jGPoCGVjGWmt8CXZ+63x+w4JD+0NL+fKX:9Jr+GPo9St8WHxSD+09+SX

    • PureCrypter

      PureCrypter is a .NET malware loader first seen in early 2021.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks