General

  • Target

    8555a2680414af4683f78a8cdca78495.bin

  • Size

    4KB

  • MD5

    df442a15c23fafc5fd55b232dd283219

  • SHA1

    1686fb4070cf0bef93597d23a027c81ed0fa09d7

  • SHA256

    7a5ccd21452f30c015345e3698201f3d36e16642373001d8735e49101cab2b82

  • SHA512

    e077e0ace405df796b19526d9ccb1aaeb02522455b3add5c3db6b79c0d3ebf0872609cb949ab7f2fd5ccc4899f12a4b7a924d7ed499b24989481a3297ffce5f8

  • SSDEEP

    96:GEhlzbNaybWbSyKo/Ez5z96nvetHyh7mM/sDFteobGRJKt/j:BPJWko/W96mtHyhb27iJm

Score
10/10

Malware Config

Extracted

Family

purecrypter

C2

https://cdn.discordapp.com/attachments/1115166443667988513/1117718390656749578/Jnugnbgwlp.dat

Signatures

  • Purecrypter family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8555a2680414af4683f78a8cdca78495.bin
    .zip

    Password: infected

  • c13ea062e1f95644caadecc45351ed4b7d9cf18452e25f06aa3dc83262be8036.exe
    .exe windows:4 windows x64

    Password: infected


    Headers

    Sections