Analysis
-
max time kernel
144s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
-
submitted
26-07-2023 14:17
General
-
Target
Canvas1.2.138.exe
-
Size
151KB
-
MD5
0d3e8b2a607f8690725820d3f55448b3
-
SHA1
4f60e63d7578c35172e4f0f6f343b2e6c96b67f8
-
SHA256
d82e1a32827eaa257519882685ddefe7a7da9d4a00f9ce1f031076e3aeac6dc2
-
SHA512
a436e9a22a62e1a16949a414b672940d311a0174f3dda67659b387d1b6f2e1f0808219c736d550d68acba718558a5ea49b8724e87c228619749fee3722f11c78
-
SSDEEP
3072:LW36LKKKKKU8AAFTbp8ELQHsoOJNuYnZIWH2qWUwZr+EM4EIGKEuYIKjAjiAMMvR:LSfJXnSKk
Score
10/10
Malware Config
Extracted
Family
purecrypter
C2
https://cdn.discordapp.com/attachments/1032442512272539739/1032487195350679613/Cklzmsrqi.png
Signatures
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Canvas1.2.138.exe"C:\Users\Admin\AppData\Local\Temp\Canvas1.2.138.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
176KB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
256KB