Analysis
- max time kernel
119s - max time network
120s - platform
windows10-2004_x64 - resource
win10v2004-20240709-en - resource tags
- submitted
21/07/2024, 01:30
General
- Target 41bfcac136ff8f5d232419298ec7b6e0N.exe
- Size 2.5MB
- Sample240721-bxbmassdkh
- SHA256 19c9916b59cb8573f64f15a1fa11e1704d24539cddad2559579ec4aff203c46c
Malware Config
Signatures
- PureLog Stealer
PureLog Stealer is an infostealer written in C#.
- PureLog Stealer payload 1 IoCs
- Suspicious use of SetThreadContext 1 IoCs
- Suspicious use of AdjustPrivilegeToken 64 IoCs
- Suspicious use of WriteProcessMemory 8 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\41bfcac136ff8f5d232419298ec7b6e0N.exe"C:\Users\Admin\AppData\Local\Temp\41bfcac136ff8f5d232419298ec7b6e0N.exe"1⤵
- Suspicious use of SetThreadContext
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\41bfcac136ff8f5d232419298ec7b6e0N.exe"C:\Users\Admin\AppData\Local\Temp\41bfcac136ff8f5d232419298ec7b6e0N.exe"2⤵
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
41bfcac136ff8f5d232419298ec7b6e0N.exe.log
memory/464-0-0x0000000074ABE000-0x0000000074ABF000-memory.dmp
memory/464-1-0x0000000000AC0000-0x0000000000D46000-memory.dmp
memory/464-2-0x0000000074AB0000-0x0000000075260000-memory.dmp
memory/464-3-0x00000000057E0000-0x0000000005A28000-memory.dmp
memory/464-4-0x0000000005AA0000-0x0000000005CEA000-memory.dmp
memory/464-6-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-10-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-38-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-48-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-36-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-34-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-32-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-28-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-26-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-30-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-24-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-22-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-20-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-16-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-14-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-8-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-18-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-5-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-12-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-52-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-68-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-66-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-64-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-62-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-60-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-58-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-56-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-54-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-50-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-46-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-44-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-42-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-40-0x0000000005AA0000-0x0000000005CE4000-memory.dmp
memory/464-4891-0x0000000074AB0000-0x0000000075260000-memory.dmp
memory/464-4892-0x0000000005D50000-0x0000000005DD6000-memory.dmp
memory/464-4893-0x0000000005E60000-0x0000000005EAC000-memory.dmp
memory/464-4894-0x0000000006670000-0x0000000006C14000-memory.dmp
memory/464-4895-0x0000000006050000-0x00000000060A4000-memory.dmp
memory/464-4898-0x0000000074AB0000-0x0000000075260000-memory.dmp
memory/2540-4900-0x0000000074A80000-0x0000000074B2B000-memory.dmp
memory/2540-4901-0x0000000000400000-0x0000000000472000-memory.dmp
memory/2540-4902-0x0000000005630000-0x00000000056C2000-memory.dmp
memory/2540-4903-0x0000000074A80000-0x0000000074B2B000-memory.dmp
memory/2540-4904-0x00000000056D0000-0x00000000056DA000-memory.dmp
memory/2540-4905-0x0000000008A10000-0x0000000009028000-memory.dmp
memory/2540-4906-0x0000000008640000-0x000000000874A000-memory.dmp
memory/2540-4907-0x0000000008580000-0x0000000008592000-memory.dmp
memory/2540-4908-0x00000000085E0000-0x000000000861C000-memory.dmp
memory/2540-4909-0x0000000008750000-0x000000000879C000-memory.dmp
memory/2540-4910-0x0000000074A80000-0x0000000074B2B000-memory.dmp