Extracted

• • Target

    a1e082c6ac81c7787edc8a751f079c70c7a28b86a6c40bb66f11c066a00bd755

  • Size

    25KB

  • MD5

    86c6c06fd51675e02aabb7495b8b246a

  • SHA1

    8172fadead654638516fbfd7c5d6749b8860c19b

  • SHA256

    a1e082c6ac81c7787edc8a751f079c70c7a28b86a6c40bb66f11c066a00bd755

  • SHA512

    5f6bd33af5b9d43cc9ff082d18aee64c20f160de539fa365650c735300e1d5d132d460c86235e476b3dc2311b412b5a3af05de55f701d183b9f8d25bfcad42bb

  • SSDEEP

    384:L0naGdVvqqnKCgFwWR3mnNFawrXebqnlF2xJ8v+jyOc35+c:idVyiKC2wMmjF6u2xagyOq5+c

  Score

  10^/10

  purecrypterdownloaderloadercollectionpersistence

  • PureCrypter

    PureCrypter is a .NET malware loader first seen in early 2021.

    loaderdownloaderpurecrypter

  • Accesses Microsoft Outlook profiles

    collection

  • Adds Run key to start application

    persistence

  • Suspicious use of SetThreadContext

  behavioral1behavioral2