General

  • Target

    3848-7213-0x0000000005440000-0x0000000005450000-memory.dmp

  • Size

    64KB

  • Sample

    230707-ja96cafg49

  • MD5

    7615776c5da2f38b707f17c65748c8e4

  • SHA1

    00e87d4ba8da7052c67d4f9099e469ed989425ea

  • SHA256

    022399fc4eed2289be4159f4ce1e7c268c72c01cad3c164c3b7f3f7c152d7588

  • SHA512

    7dbcc2e78894abe96ee09510a7c605a531034b459a41907071efb818e29721b8603d4b26c1141b115c8b256d1cfdd06dd26e692bb8978cbe9fd239bb87a46866

  • SSDEEP

    1536:fnnjAydSWV81vuLAjq4fDdpwFqo+s487Cu72vJcj:fjAyzU9LdpwFqmaBcj

Malware Config

Extracted

Family

purecrypter

C2

https://mahmoodonline.com/panel/uploads/Ebidr.wav

Targets

    • Target

      3848-7213-0x0000000005440000-0x0000000005450000-memory.dmp

    • Size

      64KB

    • MD5

      7615776c5da2f38b707f17c65748c8e4

    • SHA1

      00e87d4ba8da7052c67d4f9099e469ed989425ea

    • SHA256

      022399fc4eed2289be4159f4ce1e7c268c72c01cad3c164c3b7f3f7c152d7588

    • SHA512

      7dbcc2e78894abe96ee09510a7c605a531034b459a41907071efb818e29721b8603d4b26c1141b115c8b256d1cfdd06dd26e692bb8978cbe9fd239bb87a46866

    • SSDEEP

      1536:fnnjAydSWV81vuLAjq4fDdpwFqo+s487Cu72vJcj:fjAyzU9LdpwFqmaBcj

    • PureCrypter

      PureCrypter is a .NET malware loader first seen in early 2021.

    • Executes dropped EXE

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks