Overview

overview

10

Static

static

10

tmp.exe

windows7-x64

10

tmp.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    3.0MB

  • Sample

    231204-jvwtfshh38

  • MD5

    249fa2a560a2a8e1ae5a6b114e31afb2

  • SHA1

    3d1cecb12c80bbb4c3d69d25f8295c867a40828f

  • SHA256

    13e2517eb9d45a3d68feec9d8cec5e8aeeed4b57d63db428f68c54be4224390e

  • SHA512

    0c1f25f518e7026bcc0ba1ea55ab498e85e68ac6ce27cc12c554e75718f2d8956eb7b7407898d9cc8fbf4bd6335c63d97876c267ac3a54268930738c0b9f824b

  • SSDEEP

    98304:RjB+06fkx9KWqBDeRTsnBF75riKIJWsHGR:RjB+Rfe7RTsBF75OKjs+

Score
10/10
purelogspersistencestealer

Malware Config

Targets

    • Target

      tmp

    • Size

      3.0MB

    • MD5

      249fa2a560a2a8e1ae5a6b114e31afb2

    • SHA1

      3d1cecb12c80bbb4c3d69d25f8295c867a40828f

    • SHA256

      13e2517eb9d45a3d68feec9d8cec5e8aeeed4b57d63db428f68c54be4224390e

    • SHA512

      0c1f25f518e7026bcc0ba1ea55ab498e85e68ac6ce27cc12c554e75718f2d8956eb7b7407898d9cc8fbf4bd6335c63d97876c267ac3a54268930738c0b9f824b

    • SSDEEP

      98304:RjB+06fkx9KWqBDeRTsnBF75riKIJWsHGR:RjB+Rfe7RTsBF75OKjs+

    Score
    10/10
    purelogspersistencestealer

    • Detect PureLogs payload

    • PureLogs

      PureLogs is an infostealer written in C#.

      stealerpurelogs

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks