Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
-
submitted
01-07-2024 14:33
General
-
Target
8eb1f6c882060ba5e89e67c511fff4cc5a3ba07c22b1606bedb5af2ebbdf12e3.exe
-
Size
131KB
-
MD5
38aabd243e82893611c3499e0426f826
-
SHA1
0d744b123468208b0664e5d2124068b89a5d98d6
-
SHA256
8eb1f6c882060ba5e89e67c511fff4cc5a3ba07c22b1606bedb5af2ebbdf12e3
-
SHA512
6e446df53b4a495936ce340e44cc6bbe35ef9b2b15688590e22bf21aec4aeec12be7748ee61e5cbdadf6dbc820e8afa4cfb90a8b54c5905c5a5f7856ebbdc2cc
-
SSDEEP
1536:QyNi9vF0TAJyPxMG06lnHYVALk8u2qHlllllllOdQlwEn+gllllllllllllllllG:QyNSvuuMXRnH5tYwiVxw5lh
Score
10/10
Malware Config
Signatures
-
PureLog Stealer
PureLog Stealer is an infostealer written in C#.
-
PureLog Stealer payload 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\8eb1f6c882060ba5e89e67c511fff4cc5a3ba07c22b1606bedb5af2ebbdf12e3.exe"C:\Users\Admin\AppData\Local\Temp\8eb1f6c882060ba5e89e67c511fff4cc5a3ba07c22b1606bedb5af2ebbdf12e3.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
152KB
-
Filesize
24KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB