Analysis
-
max time kernel
129s -
max time network
139s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
10/05/2024, 01:36
General
-
Target
879783ba5a2130a233ade36bc3f02194931a0625e3bf7ec7bcdfe5bb798060d2.exe
-
Size
274KB
-
MD5
68c22e8fe6f3ffb0c39efef66b52080e
-
SHA1
2fc132a13365b3f9e428ea0afa45f1c2a619f2f7
-
SHA256
879783ba5a2130a233ade36bc3f02194931a0625e3bf7ec7bcdfe5bb798060d2
-
SHA512
90d8862fd88ab91edd72e983a994c4166c236331dc077c4b309b5f74ba9dec4f79526da92c0480f79259b1ca89cd46609f2f6b21b35c2b452f6dc1c14973d1ce
-
SSDEEP
6144:qhwZ1fnaL25qJHyMJu47RX/DNOz8h0KCfHbQsA6wNYr7:qhOfnaL25qJHyv47RX/DNOz8+H2A
Score
10/10
Malware Config
Signatures
-
PureLog Stealer
PureLog Stealer is an infostealer written in C#.
-
PureLog Stealer payload 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\879783ba5a2130a233ade36bc3f02194931a0625e3bf7ec7bcdfe5bb798060d2.exe"C:\Users\Admin\AppData\Local\Temp\879783ba5a2130a233ade36bc3f02194931a0625e3bf7ec7bcdfe5bb798060d2.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
288KB
-
Filesize
24KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB