Analysis
-
max time kernel
115s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20230621-en -
resource tags
-
submitted
01-07-2023 07:05
General
-
Target
DaHostexe.exe
-
Size
404KB
-
MD5
ca780152698dfec08f016967caaf928b
-
SHA1
7823e6982d3896174a7eae319583b38ae1f1f410
-
SHA256
6871decd4be4134f134232294b91c39181b00ffa0066476ca504455283a8a6f4
-
SHA512
e3d27f48259200b2b14a8857a38cbce054ddb68f89b436f55c82fb50b17b94800341b4c321c07b22c15461dfa89f7a771f11f99dda0d8e63c6d3bdac95f4a832
-
SSDEEP
3072:1PNE7rLSVGsTc9mAp1LE0+JXqgstrxaADCT1qhbyMtx43f1KGbF2JkW:8HLVku1LEhJXqgia4wclye433bFTW
Score
10/10
Malware Config
Extracted
Family
purecrypter
C2
http://192.210.215.42/v/panel/uploads/Dnlanfmltc.vdf
Signatures
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\DaHostexe.exe"C:\Users\Admin\AppData\Local\Temp\DaHostexe.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
64KB