Analysis
-
max time kernel
139s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
11-08-2023 17:01
General
-
Target
Sample picture.exe
-
Size
73KB
-
MD5
18e9cd6b282d626e47c2074783a2fa78
-
SHA1
29fbc33455a7d0e34b4fdaef0ef05d88736ee3d0
-
SHA256
14df7a24c57be46551df4ce6fe2cba8bc32965d48216819d6c6a277f90b2fee4
-
SHA512
87ee839797fe246c93d758821faa801083e30d0e87595d943984dcecb01b63136eec1245dbef78a4bf002f2ce21560946013a2238f972d6e0d93e85defe74645
-
SSDEEP
768:e4L/vklYymPdnsQQQQQMQQQQQQQQQG/Il:bqYyERec
Score
10/10
Malware Config
Extracted
Family
purecrypter
C2
https://cents-ability.org/loader/uploads/nodeffender_Wggyyexg.bmp
Signatures
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Sample picture.exe"C:\Users\Admin\AppData\Local\Temp\Sample picture.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
7.7MB
-
Filesize
96KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
64KB
-
Filesize
7.7MB
-
Filesize
64KB