Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20231025-en -
resource tags
-
submitted
22-11-2023 03:57
General
-
Target
202311218800-INV62009HX66549.scr
-
Size
14KB
-
MD5
19395fea893e3dcea476504227d56be6
-
SHA1
f86b35526cd61c8aab3911b11ca692225e341906
-
SHA256
3fcb840d5e65fc86ed5637bdcbab0ecde764d360ebe18a5e5d6795811dc1c622
-
SHA512
567acf5e2be2482d923142c3bd574f79475abdcfd9f63768bfe5632fe43b9ebfde3b7865c2d1971eb922686deeac4322d1c627329c96621b0c3b31940586d724
-
SSDEEP
192:Uebp41yqqdcA32GG0s4LqVrTC+xV/knQi1oo79ED607RQ:UeboyqCZ2GGOLqVTfknQyMR
Score
10/10
Malware Config
Extracted
Family
purecrypter
C2
https://teleturismo.it/wp-includes/Tzvgdu.vdf
Signatures
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\202311218800-INV62009HX66549.scr"C:\Users\Admin\AppData\Local\Temp\202311218800-INV62009HX66549.scr" /S1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
-
Filesize
9.9MB
-
Filesize
512KB
-
Filesize
9.9MB
-
Filesize
512KB