General

  • Target

    Fn Cheetos(2).zip

  • Size

    26KB

  • Sample

    230813-y4ct9seb45

  • MD5

    21d1df958a3e4f257e05e850070a87bd

  • SHA1

    9f00717bd864958b3c8ca9e7666f120029af114b

  • SHA256

    868236b1d2af78d95d70b48ecbaff46082e9e268693300e4fcc367ed78e90893

  • SHA512

    3690a17034d230c5334c1b35b285330182517165fb15d5e369ba28473b9981bdbecdca726c1937b33924e41ea979d5ed2dc40315a2883f4db68a12378d8fa7c2

  • SSDEEP

    768:G1bOx6gd0EOv6Wo3DZsaJuaS8Ud5571/EEFq:Gq6LV6WkD2Gufd5N1/EEFq

Malware Config

Extracted

Family

purecrypter

C2

https://files.catbox.moe/oe71uc.mp4

Targets

    • Target

      Fn Cheetos(2)/main.exe

    • Size

      84KB

    • MD5

      049875a9df6e7f325cdb8f8c8f28122b

    • SHA1

      a59be953046a40e80d3e24dffb819f45c93967e3

    • SHA256

      42557243c9b25077fccc14a639ddaf1d95f14924f7d72323b0b309d012ef558a

    • SHA512

      68c1d66c3caa40a210c973fb9fc6bb05f1261778501391c18f4c01a44fc4225ec4e3c22816b3a09ab686bea307aee14b84c49ace248206e289dd3d0d98511782

    • SSDEEP

      768:37d0yO4PrqefHHIKwW8X8hD/lL0WpWEtReGbCG/ltdJ:3u4PFhLZ0EtRe4CG/3dJ

    • PureCrypter

      PureCrypter is a .NET malware loader first seen in early 2021.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix

Tasks