Analysis
-
max time kernel
151s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
25-05-2023 15:06
General
-
Target
tmp.exe
-
Size
1.3MB
-
MD5
b4138222931b8458a109d11cd2194ce8
-
SHA1
3b78247eea213f18d0fa745860b3099238b31fe9
-
SHA256
8601b9efdac4733e888cc949f337cfbba4140a6a441aaefe2ab391b4d637dfbc
-
SHA512
8b7f99577a57e42fd9e302ed979a940fc6e64bdc6457866702af44272223c439e5128461120c68b88eed8d6d5257b7e29eb4625a62d9680cd2cf29feff3392bb
-
SSDEEP
24576:dpxRSasbbtRTnQ5sUm0n0m4DH5fS9Mr9CKkMcvBJsJYs45Z3S8IVej:dpfSamk5sUm0nXsCMkDBU16Z3w
Score
10/10
Malware Config
Signatures
-
Detect PureCrypter injector 33 IoCs
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\tmp.exe"C:\Users\Admin\AppData\Local\Temp\tmp.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/628-133-0x0000000000FA0000-0x00000000010EC000-memory.dmpFilesize
1.3MB
-
memory/628-134-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-135-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-137-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-139-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-141-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-143-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-145-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-148-0x0000000005B40000-0x0000000005B50000-memory.dmpFilesize
64KB
-
memory/628-147-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-150-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-152-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-154-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-156-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-158-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-160-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-162-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-164-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-166-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-168-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-172-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-170-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-174-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-176-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-178-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-180-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-182-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-184-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-186-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-188-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-190-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-192-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-194-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-196-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-198-0x0000000005B50000-0x0000000005DCF000-memory.dmpFilesize
2.5MB
-
memory/628-605-0x0000000005B40000-0x0000000005B50000-memory.dmpFilesize
64KB