Analysis
-
max time kernel
94s -
max time network
130s -
platform
windows10-2004_x64 -
resource
win10v2004-20240220-en -
resource tags
-
submitted
20-02-2024 22:33
General
-
Target
fb2b2475b815a90a26002e2d0e264b1d5e18b0b76b4911a0ad68783e20a69840.exe
-
Size
6KB
-
MD5
b07d1f0141275eb6b6e35e948a5f63f1
-
SHA1
b047666885d54a5f59fa8dc3dd17d1097d3ae12b
-
SHA256
fb2b2475b815a90a26002e2d0e264b1d5e18b0b76b4911a0ad68783e20a69840
-
SHA512
c9e3dc67c81aa5da8724f29afec24a1ebac8e01d655acc8a5a4ea1efc01f094d3c8e115b127d1154308fdfc4c8da7f13a5b046e829153ee0ea561ec4d9a4ac22
-
SSDEEP
48:6a/UR7UC1rg7fpJfzw+2sF3YSFEO0IRC+ebPQKwb565VARX54tiOlXItqFDvpfbi:Yggrg7fm4oPIRCRsnbsVAYlI+BzNt
Score
10/10
Malware Config
Extracted
Family
purecrypter
C2
http://80.66.76.30/Eryyhcchii.vdf
Signatures
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\fb2b2475b815a90a26002e2d0e264b1d5e18b0b76b4911a0ad68783e20a69840.exe"C:\Users\Admin\AppData\Local\Temp\fb2b2475b815a90a26002e2d0e264b1d5e18b0b76b4911a0ad68783e20a69840.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
10.8MB