Analysis
-
max time kernel
149s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
19-04-2024 18:30
General
-
Target
d9139bcd0b6b44e2f3d766d1d56377a756a0880730f7aeb03e29c964116933a4.exe
-
Size
12KB
-
MD5
78ad064f80c6559dd04e8536c06a1569
-
SHA1
1ac17a7aff1efd81bab6909056b3ca1ea21a56eb
-
SHA256
d9139bcd0b6b44e2f3d766d1d56377a756a0880730f7aeb03e29c964116933a4
-
SHA512
c9d37f911b3ededd2cfbafa56b7061d355ed931ab8480dc34b7fe693f03254008f0dde4bd5aadf14a0486ee97a60bb49eb89b5af8653b446c511dd2dc10c8711
-
SSDEEP
192:nxffiqOh2yC17+XLgVLg8LgTLgyYB8WTzSwuf:nxffF5y67iLoLxLQLz8Lu
Score
10/10
Malware Config
Extracted
Family
purecrypter
C2
https://transfer.sh/get/dtzeXI/Zalsbg.bmp
Signatures
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d9139bcd0b6b44e2f3d766d1d56377a756a0880730f7aeb03e29c964116933a4.exe"C:\Users\Admin\AppData\Local\Temp\d9139bcd0b6b44e2f3d766d1d56377a756a0880730f7aeb03e29c964116933a4.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
-
Filesize
7.7MB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
64KB
-
Filesize
40KB
-
Filesize
7.7MB
-
Filesize
64KB