Analysis
-
max time kernel
150s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
-
submitted
08-05-2023 05:38
General
-
Target
tmp.exe
-
Size
1.3MB
-
MD5
86221cbb7f0dd696acfc913ad055f1e9
-
SHA1
52aceb9f15f0ebceef27b378e06e42613739b481
-
SHA256
ebb2dcf0d743e210a391d665b4589e3a0e41189ed1b21fcacc8c14caf13b1ce6
-
SHA512
cdeb09240ef04ac7d5b50cd03f7479e8fa40407a34d41c780350acbaeaf4d18dc9381a4cb276ca700595a3d6a5c0abb4fa987f22bfc220d39dc4c91312c8e6d9
-
SSDEEP
24576:g+JA0Sg9WLT0Fo2/JJTBQ0g1A9K9rjF/lQkBNnWZrXBkUGlcUDSg1fcjzajdg8MC:XJJ92wZXgu49rjF/+kBNmxZG5DSg10j/
Score
10/10
Malware Config
Signatures
-
Detect PureCrypter injector 34 IoCs
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\tmp.exe"C:\Users\Admin\AppData\Local\Temp\tmp.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/2032-54-0x0000000000BB0000-0x0000000000CF8000-memory.dmpFilesize
1.3MB
-
memory/2032-55-0x0000000004DB0000-0x000000000502C000-memory.dmpFilesize
2.5MB
-
memory/2032-56-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-57-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-61-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-59-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-64-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-63-0x0000000004D70000-0x0000000004DB0000-memory.dmpFilesize
256KB
-
memory/2032-66-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-68-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-70-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-72-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-74-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-76-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-78-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-82-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-80-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-84-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-88-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-86-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-90-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-92-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-96-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-94-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-100-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-98-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-102-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-104-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-106-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-108-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-112-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-110-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-114-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-118-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-116-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-120-0x0000000004DB0000-0x0000000005026000-memory.dmpFilesize
2.5MB
-
memory/2032-876-0x0000000004D70000-0x0000000004DB0000-memory.dmpFilesize
256KB