Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
-
submitted
25-11-2023 16:25
General
-
Target
RH23148 PO-1483.scr.exe
-
Size
14KB
-
MD5
87855d601e472d9d37e772e53029dacf
-
SHA1
dd320d1aab72cf9c3f3f7fb08a71aeab98309fd4
-
SHA256
39b10e16dcda487ccf77695191c4c5e45d7e3b1ca85099f4bd934f260dc7ef62
-
SHA512
c396621f95faaae4fb94f309b498f1f52620bf912ca5e2cd75dfd3ec2f796ebae31f44ebb749691f9cbaf26ad7546200697c534bdd1d530cd22bb504ff733c93
-
SSDEEP
192:Cebp4jyqq7b2GG0/j4XlOgTQe4tt9nSidoo79ED607Ib:CebayqO2GGxXlDTQe49SCMI
Score
10/10
Malware Config
Extracted
Family
purecrypter
C2
https://suad.group/Lypqx.mp3
Signatures
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\RH23148 PO-1483.scr.exe"C:\Users\Admin\AppData\Local\Temp\RH23148 PO-1483.scr.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
-
Filesize
9.9MB
-
Filesize
512KB
-
Filesize
9.9MB