Overview

overview

10

Static

static

1

AeternumMa...er.exe

windows7-x64

4

AeternumMa...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    AeternumMapInstaller.exe

  • Size

    2.0MB

  • Sample

    231204-vrxr5ade67

  • MD5

    0f27db5bbadb5f161fa1aff4bb73f664

  • SHA1

    129ee0768a40114df1bb47e8f6551c196f26fdd2

  • SHA256

    ec71936f66afd699abf9227c275e6e3af6858488c6edf75c832919973f79ed5a

  • SHA512

    2ebc01027229c074f4b2bc3ae91d2874af018f6e4546cc0ef0e0e7fd0a19946aca2ccb8f944aca1f0366fd4f26af437a5ed73c81eb442599be4215c74012f36e

  • SSDEEP

    49152:9SlBxE87vxpsrFpIvxqMsaMwgs3W/0s9YdBA0cM:9SRPN+TIvxqMshwv3W/0NDA0

Score
10/10
purelogspersistencestealer

Malware Config

Targets

    • Target

      AeternumMapInstaller.exe

    • Size

      2.0MB

    • MD5

      0f27db5bbadb5f161fa1aff4bb73f664

    • SHA1

      129ee0768a40114df1bb47e8f6551c196f26fdd2

    • SHA256

      ec71936f66afd699abf9227c275e6e3af6858488c6edf75c832919973f79ed5a

    • SHA512

      2ebc01027229c074f4b2bc3ae91d2874af018f6e4546cc0ef0e0e7fd0a19946aca2ccb8f944aca1f0366fd4f26af437a5ed73c81eb442599be4215c74012f36e

    • SSDEEP

      49152:9SlBxE87vxpsrFpIvxqMsaMwgs3W/0s9YdBA0cM:9SRPN+TIvxqMshwv3W/0NDA0

    Score
    10/10
    purelogspersistencestealer

    • Detect PureLogs payload

    • PureLogs

      PureLogs is an infostealer written in C#.

      stealerpurelogs

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks