Analysis
-
max time kernel
145s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20231130-en -
resource tags
-
submitted
04-12-2023 01:35
General
-
Target
ae501700c72fba1c4dd283f2a31ede95e86d3ed756ce0a2b3c471e2cda547f8a.exe
-
Size
328KB
-
MD5
485a7fcc53fffdb7ffe9fa5fd4afa7d5
-
SHA1
76d579020a5ad1eba504b06eb9a27a0f95049660
-
SHA256
ae501700c72fba1c4dd283f2a31ede95e86d3ed756ce0a2b3c471e2cda547f8a
-
SHA512
515c62f60a2541db75f31931aab3ca7d10f72f0240f140507af274031473d3709108663bd6842d63885978ce2136ffa91959a718481ade6e9369f1052268dd64
-
SSDEEP
3072:yQQSPVYPiKeGh+HdJDbZ7dsVCA1ItYu85By7uR6OUJOTzaPX4r1S+ibFcLYXYohx:8ecVmg0pGRhKjWh3NgfHenFYD
Score
10/10
Malware Config
Signatures
-
Detect PureLogs payload 2 IoCs
-
PureLogs
PureLogs is an infostealer written in C#.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ae501700c72fba1c4dd283f2a31ede95e86d3ed756ce0a2b3c471e2cda547f8a.exe"C:\Users\Admin\AppData\Local\Temp\ae501700c72fba1c4dd283f2a31ede95e86d3ed756ce0a2b3c471e2cda547f8a.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
344KB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
6.9MB