Analysis
-
max time kernel
138s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
19-06-2023 11:07
General
-
Target
4e88882229d670607cdf3f3e6a236f4900b5ea1763b845f0316b1ca2b38948c8.exe
-
Size
9KB
-
MD5
47eb79e25709009fd3f7ce8208cceed3
-
SHA1
57023d8cdac8c4e5cf5c2f4af8a0840897c8319b
-
SHA256
4e88882229d670607cdf3f3e6a236f4900b5ea1763b845f0316b1ca2b38948c8
-
SHA512
8c246c61474be7ba26be70fba1bbb4354ff801b5ecbed8488cb065a159220b79d3757ccb99c24f840398676c433a35bf4fffc635782f5e9bf1ebbb240f3a984f
-
SSDEEP
192:axUkB9vxf0m0lkmXCWUd+2T/pBdLtRyUetdbfhNQ6WbvWv:amWPfskXWUd7T/pLLtdwThNrWbvW
Score
10/10
Malware Config
Extracted
Family
purecrypter
C2
http://80.66.75.37/Iemac.dll
Signatures
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4e88882229d670607cdf3f3e6a236f4900b5ea1763b845f0316b1ca2b38948c8.exe"C:\Users\Admin\AppData\Local\Temp\4e88882229d670607cdf3f3e6a236f4900b5ea1763b845f0316b1ca2b38948c8.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
40KB
-
Filesize
64KB
-
Filesize
64KB