Analysis
-
max time kernel
150s -
max time network
154s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
-
submitted
19-09-2023 16:16
General
-
Target
a1e082c6ac81c7787edc8a751f079c70c7a28b86a6c40bb66f11c066a00bd755_JC.exe
-
Size
25KB
-
MD5
86c6c06fd51675e02aabb7495b8b246a
-
SHA1
8172fadead654638516fbfd7c5d6749b8860c19b
-
SHA256
a1e082c6ac81c7787edc8a751f079c70c7a28b86a6c40bb66f11c066a00bd755
-
SHA512
5f6bd33af5b9d43cc9ff082d18aee64c20f160de539fa365650c735300e1d5d132d460c86235e476b3dc2311b412b5a3af05de55f701d183b9f8d25bfcad42bb
-
SSDEEP
384:L0naGdVvqqnKCgFwWR3mnNFawrXebqnlF2xJ8v+jyOc35+c:idVyiKC2wMmjF6u2xagyOq5+c
Score
10/10
Malware Config
Extracted
Family
purecrypter
C2
https://qu.ax/lrae.dat
Signatures
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a1e082c6ac81c7787edc8a751f079c70c7a28b86a6c40bb66f11c066a00bd755_JC.exe"C:\Users\Admin\AppData\Local\Temp\a1e082c6ac81c7787edc8a751f079c70c7a28b86a6c40bb66f11c066a00bd755_JC.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
40KB
-
Filesize
9.9MB
-
Filesize
512KB
-
Filesize
9.9MB
-
Filesize
512KB