Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0cfe0c50487f6d372e650d4171b51dae5a085de9d604a6701c5ebec442268b5b

  • Size

    335KB

  • Sample

    240319-xglm8ace3v

  • MD5

    17783c63b34cb560cee2219a5a718511

  • SHA1

    0653a57e59b4bbb9735d0c2f320bcf79c414ba82

  • SHA256

    0cfe0c50487f6d372e650d4171b51dae5a085de9d604a6701c5ebec442268b5b

  • SHA512

    4a95b7972343d13bdb5ef1ed2f9d5cad3725fbdcb2aefe44987a4eb5ffa49c76fa07b73c6cc205ca7d73c39f50dbb59a9c337b82c69bee25051f836c55061a59

  • SSDEEP

    6144:lW8ABhSQBJd85Cnz4ny1+J6HRw2bLnZRo4G8u3i43FHm7p1:A8qdd85CnWycJ6HhTQ3M

Score
10/10
purecrypterdownloaderloader

Malware Config

Extracted

Family

purecrypter

C2

https://janiking.xyz/loader/uploads/Whotdf_Kzhgekln.png

Targets

    • Target

      0cfe0c50487f6d372e650d4171b51dae5a085de9d604a6701c5ebec442268b5b

    • Size

      335KB

    • MD5

      17783c63b34cb560cee2219a5a718511

    • SHA1

      0653a57e59b4bbb9735d0c2f320bcf79c414ba82

    • SHA256

      0cfe0c50487f6d372e650d4171b51dae5a085de9d604a6701c5ebec442268b5b

    • SHA512

      4a95b7972343d13bdb5ef1ed2f9d5cad3725fbdcb2aefe44987a4eb5ffa49c76fa07b73c6cc205ca7d73c39f50dbb59a9c337b82c69bee25051f836c55061a59

    • SSDEEP

      6144:lW8ABhSQBJd85Cnz4ny1+J6HRw2bLnZRo4G8u3i43FHm7p1:A8qdd85CnWycJ6HhTQ3M

    Score
    10/10
    purecrypterdownloaderloader

    • PureCrypter

      PureCrypter is a .NET malware loader first seen in early 2021.

      loaderdownloaderpurecrypter

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks