Analysis
-
max time kernel
146s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
19-04-2024 18:31
General
-
Target
be276e7b9e59a10d513ac473dc9b78c9218d451eb2df47f68e4f51e19270d375.exe
-
Size
21KB
-
MD5
e4386f6d81e66e8fe33c78e171d5bb43
-
SHA1
c64b17aae0f711d316bf250e5d1c90158549fe6e
-
SHA256
be276e7b9e59a10d513ac473dc9b78c9218d451eb2df47f68e4f51e19270d375
-
SHA512
e4b6db1e0e3a1e41caac4993cd2f2924b6de072c07d937fabb0ca64a5ff5ce76a8a2b77a78f72e22addcab3c37b209509c8557c4899290d81d6e006ee36b92cd
-
SSDEEP
384:GGZourLJL5+tZSHoH6Mp7e2BQHkx/jvkKSO8SnRr96W:ZZo4mtZIMZeG/rg4RoW
Score
10/10
Malware Config
Extracted
Family
purecrypter
C2
https://endirect2.fr/loader/uploads/progzone_Cakmfjqe.jpg
Signatures
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\be276e7b9e59a10d513ac473dc9b78c9218d451eb2df47f68e4f51e19270d375.exe"C:\Users\Admin\AppData\Local\Temp\be276e7b9e59a10d513ac473dc9b78c9218d451eb2df47f68e4f51e19270d375.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
40KB
-
Filesize
6.9MB
-
Filesize
256KB
-
Filesize
6.9MB
-
Filesize
256KB