Extracted

• • Target

    56b4ddf6c247124f9bc633b06b169a84.rtf

  • Size

    35KB

  • MD5

    56b4ddf6c247124f9bc633b06b169a84

  • SHA1

    f6d0dfca950ccd1fcb92ed511afba92db7edc843

  • SHA256

    67ad0f57895b9963fff217941c49d4eb97023d65fd5b3d36ab936c24fa35a6f0

  • SHA512

    6b9e14c704e944b576091f0339e874ed679eeb6d2eba55bb65826fa66d7cb0856d20e1a99cb3cb40599b1065586a138aacf64617490c1c7a237e67ed61b980a3

  • SSDEEP

    384:hWpJrekkBQCwF1YiQwB622Kfc51AD1BMulQGcCAnYuw:hWvSQ3F1YiQwMZFsAulQQAw

  Score

  10^/10

  purecrypterdownloaderloader

  • PureCrypter

    PureCrypter is a .NET malware loader first seen in early 2021.

    loaderdownloaderpurecrypter

  • Blocklisted process makes network request

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2