General

  • Target

    VirusShare_00fce918b5cf447876a61f05978b2db0

  • Size

    74KB

  • Sample

    231218-xhcfyaeac6

  • MD5

    00fce918b5cf447876a61f05978b2db0

  • SHA1

    6dec21de3d9d4584e2200a117e6edf70ecfd5c11

  • SHA256

    73d66c77945f6ff7fe5d62a4ba5efd4bbc2f8459eaf4722833e0df6cfd4c6309

  • SHA512

    31b0801ad232b746493c073527bf238b4d6bbc929313109222ac7a4625e831dcbbaaac973f6a0c0f825aef14432dcb8968b08676f27cef14914842561da59206

  • SSDEEP

    1536:aheb4mzLMaM68hD0BLX/yYiAst6C4bllDp7kXqXPtkrBZF7SzKHzUWhUzTrGtltD:Lb4mzLMaM68hD0BLX/yYiAst6C4bllDO

Malware Config

Extracted

Family

purecrypter

C2

https://store2.gofile.io/download/5c283eeb-ee75-4585-ac23-386c6a3ea789/Jcafcgneb.dll

Targets

    • Target

      VirusShare_00fce918b5cf447876a61f05978b2db0

    • Size

      74KB

    • MD5

      00fce918b5cf447876a61f05978b2db0

    • SHA1

      6dec21de3d9d4584e2200a117e6edf70ecfd5c11

    • SHA256

      73d66c77945f6ff7fe5d62a4ba5efd4bbc2f8459eaf4722833e0df6cfd4c6309

    • SHA512

      31b0801ad232b746493c073527bf238b4d6bbc929313109222ac7a4625e831dcbbaaac973f6a0c0f825aef14432dcb8968b08676f27cef14914842561da59206

    • SSDEEP

      1536:aheb4mzLMaM68hD0BLX/yYiAst6C4bllDp7kXqXPtkrBZF7SzKHzUWhUzTrGtltD:Lb4mzLMaM68hD0BLX/yYiAst6C4bllDO

    • PureCrypter

      PureCrypter is a .NET malware loader first seen in early 2021.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks