Analysis
-
max time kernel
129s -
max time network
147s -
platform
windows11-21h2_x64 -
resource
win11-20240221-en -
resource tags
-
submitted
19-03-2024 18:55
General
-
Target
9a4b452634bd83958db7d43c8f35afa8959dfb591174cf08da59e59055099f6b.exe
-
Size
6KB
-
MD5
4a8b3b7b4f48c262be27fdc0c2e2c2a7
-
SHA1
789651c776aaf158a11c28495dba518ebe12200a
-
SHA256
9a4b452634bd83958db7d43c8f35afa8959dfb591174cf08da59e59055099f6b
-
SHA512
92fd647f55418691be466d8ba43990e93f91d1a59552bf29276ff8b53d990abb2246084609a8da1726df917e4a8f5237141c1dd39241a69d1e8f3b5aaa32ece1
-
SSDEEP
96:2V/IXEtx/s2UsObW3eHnojE1dzsq35jGglKRFnU:2JIXux5UsIWOIATzsQ5xKg
Score
10/10
Malware Config
Extracted
Family
purecrypter
C2
https://janiking.xyz/loader/uploads/Vpeswawqko_Gvaqkdrq.bmp
Signatures
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9a4b452634bd83958db7d43c8f35afa8959dfb591174cf08da59e59055099f6b.exe"C:\Users\Admin\AppData\Local\Temp\9a4b452634bd83958db7d43c8f35afa8959dfb591174cf08da59e59055099f6b.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
-
Filesize
7.7MB
-
Filesize
64KB
-
Filesize
7.7MB
-
Filesize
64KB