Analysis
-
max time kernel
148s -
max time network
149s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
19-07-2024 14:15
Behavioral task
behavioral1
Sample
1938dc0aa8afda1d86e62b28b3a6fcbbeed942af9a1ee713bb81c6323e8ad593.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1938dc0aa8afda1d86e62b28b3a6fcbbeed942af9a1ee713bb81c6323e8ad593.exe
Resource
win10v2004-20240709-en
General
-
Target
1938dc0aa8afda1d86e62b28b3a6fcbbeed942af9a1ee713bb81c6323e8ad593.exe
-
Size
272KB
-
MD5
3c68c79a96bd82e7e4c375be5c78fe57
-
SHA1
c28a1fdcece2e1c5560af77d9deecfc5bda6e577
-
SHA256
1938dc0aa8afda1d86e62b28b3a6fcbbeed942af9a1ee713bb81c6323e8ad593
-
SHA512
c60af81af0413794b3072ced034695e4077163fbbb77ef67a2ccd3851a9a7038249ca425332ec4aac6f820a5983d75f9d3e2a6e4503569ebff991fb036689539
-
SSDEEP
6144:wpLRwNH1zAJeLccapdUZ0t96uwrhmkzcrFxnzAgvkqD:wRR2H18JFcaUZMgrhm1rFxnzRs8
Malware Config
Signatures
-
PureLog Stealer
PureLog Stealer is an infostealer written in C#.
-
PureLog Stealer payload 1 IoCs
Processes:
resource yara_rule behavioral1/memory/2152-1-0x00000000011F0000-0x0000000001236000-memory.dmp family_purelog_stealer -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
1938dc0aa8afda1d86e62b28b3a6fcbbeed942af9a1ee713bb81c6323e8ad593.exedescription pid process Token: SeDebugPrivilege 2152 1938dc0aa8afda1d86e62b28b3a6fcbbeed942af9a1ee713bb81c6323e8ad593.exe