purecrypter | da24d44e4ab2b689a7fbcc940c69a4c81bd2708630eaec003da7f30634691ecd | Triage

Sharing

General

Target

da24d44e4ab2b689a7fbcc940c69a4c81bd2708630eaec003da7f30634691ecd
Size

25KB
Sample

240419-wyrecsbg77
MD5

db57d5e07435f38c4ff1a6d12ba2b519
SHA1

b324a9ca544abac9eae361d8674e94064a18e657
SHA256

da24d44e4ab2b689a7fbcc940c69a4c81bd2708630eaec003da7f30634691ecd
SHA512

5310ab33ad91b3c0d4dbbb3a8501c95e4f701f995c382a1e751949de65d0e46b8a66f30833b806c7531cb98c1f7c91e8cbda38c58c46a794be35632bf667de19
SSDEEP

768:yH5qUwgxlpWyffIeS8ftXsLSOjpr9d4wZDpRKuvd:m/Lp/f+8faLSOzdPDpRFvd

Score

10^/10

purecrypter downloader loader

Malware Config

Extracted

Family

purecrypter

C2

https://store2.gofile.io/download/0283e6ba-afc6-4dcb-b2f4-3173d666e2c4/Huzeigtmvaplpinhoo.dll

Targets

- Target
  
  53d520c1f12fe4e479c6e31626f7d4aba5a65d107c1a13401380ebca7cca5b05
- Size
  
  76KB
- MD5
  
  99a0109485e8ca6d9ee2b809390d89b8
- SHA1
  
  ea89519b812adc5dff90531a6c64c987d6d109d8
- SHA256
  
  53d520c1f12fe4e479c6e31626f7d4aba5a65d107c1a13401380ebca7cca5b05
- SHA512
  
  5ec47bef15f1521c2cb5dc14a59c11dde14bd693f7df64991bb1268305eff03c8e0adc5fa6e2ddd6d5eecd1f9ac5c5ea0a90f4c6c6349348afb97a42a43fede8
- SSDEEP
  
  768:lw1QHHkyIULFMBc237bobA7ymRd0uxUDTJL6oNsgBvAyox0cf:l3tIULFMAAiu6JL6oNsgFAyox0cf
Score

10^/10

purecrypter downloader loader
- PureCrypter
  PureCrypter is a .NET malware loader first seen in early 2021.
  loader downloader purecrypter
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

Install Root Certificate

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

purecrypterdownloaderloader

behavioral2

purecrypterdownloaderloader