5a346e16df8a4e5b3af84833fac97469a3a268375b7181cfa61e5a2155e64adf

Sharing

Copy URL Twitter E-mail

General

Target

Purity_Setup.exe
Size

51.8MB
Sample

240118-w9ly1sfbcp
MD5

aac0c1284f826f64b438fd548545c2f6
SHA1

2d2c2b660fa3d956ee0ab3d1157458a736264b4b
SHA256

5a346e16df8a4e5b3af84833fac97469a3a268375b7181cfa61e5a2155e64adf
SHA512

0526c2065641a7289995c7027d1e57308eaf9664ee24589ea9720cef67bad07f7ab27a5b98939160a9d619b689986b87a86070df80b7c223161e7fae883874e1
SSDEEP

786432:sz/s4XCJrQXhuHnYvw6rbMtmHcZ3oiqB6hyGBC3Ig4UTKVgEWkoG6ef3+yv:uD2EXIHhCQo8FoiAZ4UuVgEW/Gtv

Score

7^/10

Malware Config

Targets

- Target
  
  Purity_Setup.exe
- Size
  
  51.8MB
- MD5
  
  aac0c1284f826f64b438fd548545c2f6
- SHA1
  
  2d2c2b660fa3d956ee0ab3d1157458a736264b4b
- SHA256
  
  5a346e16df8a4e5b3af84833fac97469a3a268375b7181cfa61e5a2155e64adf
- SHA512
  
  0526c2065641a7289995c7027d1e57308eaf9664ee24589ea9720cef67bad07f7ab27a5b98939160a9d619b689986b87a86070df80b7c223161e7fae883874e1
- SSDEEP
  
  786432:sz/s4XCJrQXhuHnYvw6rbMtmHcZ3oiqB6hyGBC3Ig4UTKVgEWkoG6ef3+yv:uD2EXIHhCQo8FoiAZ4UuVgEW/Gtv
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/InstallOptions.dll
- Size
  
  14KB
- MD5
  
  325b008aec81e5aaa57096f05d4212b5
- SHA1
  
  27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA256
  
  c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- SHA512
  
  18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP
  
  192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
Score

3^/10
behavioral3 behavioral4
- Target
  
  $PLUGINSDIR/LangDLL.dll
- Size
  
  5KB
- MD5
  
  9384f4007c492d4fa040924f31c00166
- SHA1
  
  aba37faef30d7c445584c688a0b5638f5db31c7b
- SHA256
  
  60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5
- SHA512
  
  68f158887e24302673227adffc688fd3edabf097d7f5410f983e06c6b9c7344ca1d8a45c7fa05553adcc5987993df3a298763477168d4842e554c4eb93b9aaaf
- SSDEEP
  
  48:iV6pAvmNC6iMPUptxEZK65x/AmvycNSmwVsOYJyvrpXptp/JvR0Jlof5d2:2811GED5ZTvycNSmwVsTJuftpZR0Sd2
Score

3^/10
behavioral5 behavioral6
- Target
  
  $PLUGINSDIR/System.dll
- Size
  
  11KB
- MD5
  
  c17103ae9072a06da581dec998343fc1
- SHA1
  
  b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA256
  
  dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- SHA512
  
  d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP
  
  192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
Score

3^/10
behavioral7 behavioral8
- Target
  
  $PLUGINSDIR/modern-wizard.bmp
- Size
  
  150KB
- MD5
  
  990c32c42e6a316738ea1d7f380d8440
- SHA1
  
  c42978831035f45b9f575725ed26aac452aa3f3f
- SHA256
  
  b327ff3e5c3a88b785f2084cc6bcf6b49fa8f2a3f87e7f0fa7b359e2e71cbb1b
- SHA512
  
  8ecff4892906686136aaa36452150f174318990cd20bed1bc3387ce78aa45088ef8148f990b6cb7d4ddee865dd0102a1fb021b4e491f1598fbb133bcb3a5eff1
- SSDEEP
  
  3072:ucBrAfhHIUx8OI5lyd3V5/B1KFko4YL5fFG:HBrAfho6I5lOHB1Sb4eU
Score

1^/10
behavioral10 behavioral9
- Target
  
  $R0
- Size
  
  617KB
- MD5
  
  1169436ee42f860c7db37a4692b38f0e
- SHA1
  
  4ccd15bf2c1b1d541ac883b0f42497e8ced6a5a3
- SHA256
  
  9382aaed2db19cd75a70e38964f06c63f19f63c9dfb5a33b0c2d445bb41b6e46
- SHA512
  
  e06064eb95a2ab9c3343672072f5b3f5983fc8ea9e5c92f79e50ba2e259d6d5fa8ed97170dea6d0d032ea6c01e074eefaab850d28965c7522fb7e03d9c65eae0
- SSDEEP
  
  12288:bxzh9hH5RVKTp0G+vjhr46CIw+0yZmGyYCj:bph9hHzVKOpXwymGyYo
Score

1^/10
behavioral11 behavioral12
- Target
  
  $_4_/Purity.dll
- Size
  
  4.0MB
- MD5
  
  be6178ac796756340d892abc423ad21c
- SHA1
  
  e8adf475efc25eea4abd4e41cb26b34724a8abc7
- SHA256
  
  53e68f8db449580fb51eddb573bdef21901065eb4df9f31ba4747072160d33cc
- SHA512
  
  64a0a3de69c1c13442be5c9fbd8396223b2a8392de3fa62ae93f04cd63e15e79878e800f6c357e66ff484f68ddc3a87ad65c265c51243d296573c52405703371
- SSDEEP
  
  49152:bgUWXEvPLfjI8f10Szr78O+hzi48MJxNHeLV2F2JvPZmLklaBfg:bgUWUvPLfjI8fLzX8dzi48MJxReVb2
Score

3^/10
behavioral13 behavioral14
- Target
  
  Purity.dll
- Size
  
  4.0MB
- MD5
  
  be6178ac796756340d892abc423ad21c
- SHA1
  
  e8adf475efc25eea4abd4e41cb26b34724a8abc7
- SHA256
  
  53e68f8db449580fb51eddb573bdef21901065eb4df9f31ba4747072160d33cc
- SHA512
  
  64a0a3de69c1c13442be5c9fbd8396223b2a8392de3fa62ae93f04cd63e15e79878e800f6c357e66ff484f68ddc3a87ad65c265c51243d296573c52405703371
- SSDEEP
  
  49152:bgUWXEvPLfjI8f10Szr78O+hzi48MJxNHeLV2F2JvPZmLklaBfg:bgUWUvPLfjI8fLzX8dzi48MJxReVb2
Score

3^/10
behavioral15 behavioral16
- Target
  
  Purity.exe
- Size
  
  328KB
- MD5
  
  5cec7e66b017cf0cadf9b8eb2e3adac3
- SHA1
  
  ec713a689f001e934258aa8c3fbae1502a279fd1
- SHA256
  
  1d790e0fb5e574eb496bc674044b74d6b3c555f95bec238be37c7f118b30c929
- SHA512
  
  b7dbf45ce6db4e0df6c87cdafd677c7afa374db6e16d5b3073099536616c2757ad39b8b8b5d884046c674351569232762132673683c335931845349a7c3f7f82
- SSDEEP
  
  6144:6DnLrJIyIzJXgJPLk88wbbXz6uU2yZAOeMVUYVhnkgbM9t:6LXSOH9UbZgMqYVhngt
Score

1^/10
behavioral17 behavioral18
- Target
  
  Purity.pdf
- Size
  
  5.8MB
- MD5
  
  008c72746e787c5ef253b1fba3c18971
- SHA1
  
  53c5c2ee202aa3d7f87e5b230d4490984c7df03a
- SHA256
  
  030fc6fa8d631a33b5ba7cb8e6b87ebd32078eb59a41046f65129fa5dd9125bd
- SHA512
  
  44891741d105f163c140aa3146f392e7ff037ba20631f8c894c3d4842c7db92bd75cb1b5c77e82ab2c5dd7301f4d81377a8a73a7c27744b22a6e7f49a59f1f12
- SSDEEP
  
  98304:TPwg0HtUYFw9xH4KCjS4SDzSAFsRaVJGUNDBTM2xzDjUi6WashM:zAUPxTCYzTuQV11HxzDAWaZ
Score

1^/10
behavioral19 behavioral20
- Target
  
  msvcr80.dll
- Size
  
  617KB
- MD5
  
  1169436ee42f860c7db37a4692b38f0e
- SHA1
  
  4ccd15bf2c1b1d541ac883b0f42497e8ced6a5a3
- SHA256
  
  9382aaed2db19cd75a70e38964f06c63f19f63c9dfb5a33b0c2d445bb41b6e46
- SHA512
  
  e06064eb95a2ab9c3343672072f5b3f5983fc8ea9e5c92f79e50ba2e259d6d5fa8ed97170dea6d0d032ea6c01e074eefaab850d28965c7522fb7e03d9c65eae0
- SSDEEP
  
  12288:bxzh9hH5RVKTp0G+vjhr46CIw+0yZmGyYCj:bph9hHzVKOpXwymGyYo
Score

1^/10
behavioral21 behavioral22
- Target
  
  uninst Purity.exe
- Size
  
  212KB
- MD5
  
  cd3286e328c8f5a6cfc58bccfdc6b6ba
- SHA1
  
  a39ff471ec081ec1a89d5511e1a87fd1c2e4462d
- SHA256
  
  5869a0ebad4731751c9c21975a2861363fabd79985fe93d3c4cb3595a6da23c7
- SHA512
  
  a96ca8cc6ee6e26940345bbeb2a639577322b03fa0146f24ba5fca3e7a1313c3e7911fb8a3b232dab75a958a3acbb970466979089d5fb90b05602c4b3142b53a
- SSDEEP
  
  3072:XLk395hYXJewl03IT2TkMjKK1HNz0DPWFjdhdWdyWmlvJYDBW7gYN:XQqkwkI6kMBn0KFj18IYWF
Score

7^/10
- Executes dropped EXE
- Loads dropped DLL
behavioral23 behavioral24
- Target
  
  $PLUGINSDIR/InstallOptions.dll
- Size
  
  14KB
- MD5
  
  325b008aec81e5aaa57096f05d4212b5
- SHA1
  
  27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA256
  
  c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- SHA512
  
  18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP
  
  192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
Score

3^/10
behavioral25 behavioral26
- Target
  
  $PLUGINSDIR/LangDLL.dll
- Size
  
  5KB
- MD5
  
  9384f4007c492d4fa040924f31c00166
- SHA1
  
  aba37faef30d7c445584c688a0b5638f5db31c7b
- SHA256
  
  60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5
- SHA512
  
  68f158887e24302673227adffc688fd3edabf097d7f5410f983e06c6b9c7344ca1d8a45c7fa05553adcc5987993df3a298763477168d4842e554c4eb93b9aaaf
- SSDEEP
  
  48:iV6pAvmNC6iMPUptxEZK65x/AmvycNSmwVsOYJyvrpXptp/JvR0Jlof5d2:2811GED5ZTvycNSmwVsTJuftpZR0Sd2
Score

3^/10
behavioral27 behavioral28
- Target
  
  $PLUGINSDIR/modern-wizard.bmp
- Size
  
  150KB
- MD5
  
  990c32c42e6a316738ea1d7f380d8440
- SHA1
  
  c42978831035f45b9f575725ed26aac452aa3f3f
- SHA256
  
  b327ff3e5c3a88b785f2084cc6bcf6b49fa8f2a3f87e7f0fa7b359e2e71cbb1b
- SHA512
  
  8ecff4892906686136aaa36452150f174318990cd20bed1bc3387ce78aa45088ef8148f990b6cb7d4ddee865dd0102a1fb021b4e491f1598fbb133bcb3a5eff1
- SSDEEP
  
  3072:ucBrAfhHIUx8OI5lyd3V5/B1KFko4YL5fFG:HBrAfho6I5lOHB1Sb4eU
Score

1^/10
behavioral29 behavioral30

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Drops file in System32 directory

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30