Analysis
- max time kernel
141s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
- submitted
14/07/2023, 03:45
General
- Target Bxbnmjpq.exe
- Size 80KB
- Sample230714-ea23hsca73
- SHA256 c599bebc9ae54a54710008042361293d71475e5fbe8f0cbaceb6ee4565a72015
Score
10/10
Malware Config
Extracted
Family
-
purecrypter
C2
-
http://80.66.75.37/a-Xmifagl.dll
Signatures
- PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Bxbnmjpq.exe"C:\Users\Admin\AppData\Local\Temp\Bxbnmjpq.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2488-133-0x00000000009B0000-0x00000000009CA000-memory.dmp
memory/2488-134-0x0000000074940000-0x00000000750F0000-memory.dmp
memory/2488-135-0x0000000005380000-0x0000000005390000-memory.dmp
memory/2488-136-0x0000000074940000-0x00000000750F0000-memory.dmp
memory/2488-137-0x0000000005380000-0x0000000005390000-memory.dmp