Analysis
-
max time kernel
121s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
14-07-2023 03:45
General
-
Target
Bxbnmjpq.exe
-
Size
80KB
-
MD5
6ea65106bdd4ab1148028f83956336d1
-
SHA1
a1e0b3255718cd3478e6a585305427a8f2f3133d
-
SHA256
c599bebc9ae54a54710008042361293d71475e5fbe8f0cbaceb6ee4565a72015
-
SHA512
f0968062f384b2760d1f6f0189a70d6adefe2ca5162c6acffb64c351d7dbd0da0db00e56fa4c7ca9cb94f9b6b98ef732593412b6e1e23799aa06b7e394b2c95a
-
SSDEEP
1536:YnJZzZ0+yQaiu6BkuUIbppIHI+CwthPLO3QeDfI:+Dt0+Faiu6BkuUIbppIHI+Cwt5LOgSfI
Score
10/10
Malware Config
Extracted
Family
purecrypter
C2
http://80.66.75.37/a-Xmifagl.dll
Signatures
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Bxbnmjpq.exe"C:\Users\Admin\AppData\Local\Temp\Bxbnmjpq.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.9MB
-
Filesize
104KB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
256KB