Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
08-04-2024 01:22
General
-
Target
40541150d39975c60a7187ad81fe20ecf1525a8831ede5c735af2bb68cea4365.exe
-
Size
46KB
-
MD5
67fbec9b6576f967be0c088b209232e7
-
SHA1
bd3e79b8ec9bd9cc4aaaa276097e03f7fa26f813
-
SHA256
40541150d39975c60a7187ad81fe20ecf1525a8831ede5c735af2bb68cea4365
-
SHA512
f0de99a297f4e2eceb89dfc4c583dda1932f150807b60f16a6537a4fa51b413ed77ceb38567950c1a4f642e0a0f3516c977f489bb6e045a7c3e789d767eb960c
-
SSDEEP
768:J2zFjEXzmm86zx4KwEjq90PGTRYi6yqqAMxkElBdVS:MFeB4K9q90+TR7Bxx
Score
10/10
Malware Config
Extracted
Family
purecrypter
C2
http://futilloiu.duckdns.org/byfronbypass.html/css/mss/Usokw.wav
Signatures
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\40541150d39975c60a7187ad81fe20ecf1525a8831ede5c735af2bb68cea4365.exe"C:\Users\Admin\AppData\Local\Temp\40541150d39975c60a7187ad81fe20ecf1525a8831ede5c735af2bb68cea4365.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
40KB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
10.8MB
-
Filesize
64KB