Analysis
-
max time kernel
146s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
09-05-2024 10:10
General
-
Target
d1e97dd47e3903ba07de598a3048d1bffff8df29c47cbd852c958a4c210d677a.exe
-
Size
68KB
-
MD5
ac015ea331170ea31df4abc5461b51f4
-
SHA1
f31473ebcab052a6a632ce165fd7c717b8add5d4
-
SHA256
d1e97dd47e3903ba07de598a3048d1bffff8df29c47cbd852c958a4c210d677a
-
SHA512
e33d433df818f096d09b3f5337800a98fb2d88fd07d75a722edfe8b8d7cc57c599c3431fbf5809c718c802e60fd00fa2a2a46a1c41fe8b6a7e586a7b2c5aa615
-
SSDEEP
1536:y1gopCTSbwFnN/GGGw8RbXnnzo5d9Zb35LhlEDSUlJA7FAx:yISkFAq8Rbnnzo5d9Zb35LhlEDSUlJA
Score
10/10
Malware Config
Signatures
-
PureLog Stealer
PureLog Stealer is an infostealer written in C#.
-
PureLog Stealer payload 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d1e97dd47e3903ba07de598a3048d1bffff8df29c47cbd852c958a4c210d677a.exe"C:\Users\Admin\AppData\Local\Temp\d1e97dd47e3903ba07de598a3048d1bffff8df29c47cbd852c958a4c210d677a.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
80KB
-
Filesize
24KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB