purelogstealer | f183fe8f365d461bfa6c2d5603f37bb2da5b57393847486df99785df6f888195

General

Target
f183fe8f365d461bfa6c2d5603f37bb2da5b57393847486df99785df6f888195
Size 17.7MB
Sample240723-rmbsbaxcrb
SHA256 f183fe8f365d461bfa6c2d5603f37bb2da5b57393847486df99785df6f888195
MD5 558fe324512f06845e154692cd694a6a
SHA1 a30c979fae47ed0dfd84fb7c7951d30e51eba924
SHA512 3ba0c219e0edc5c847c94993e93487f82996f7f4e3499c83644fe230427ce9b8c0a7b98f47bef2accb10253d4235da902cc82bfcbcbd029c1f1863ef7e349a4e
SSDEEP 393216:yTspB3gFqzV1f1XI6UuO6YJZ9nyV4z1rBdj/XmliyB:kQWF8DS6UuO62Q4lBdj/Xmliy
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  Adobe After Effects 2024 24.0.3.2 (x64) + Patch/Adobe After Effects 2024 24.0.3.2 (x64) + Patch/Pre-Install.exe
- Size 821KB
- SHA256 e135035e26c55a2662f65f6bbf23b5c2a3c2736a81f434b00b05b0d15aeb4ace
- MD5 65c8e1071be3b9798f3cc3be165d97bb
- SHA1 b270b466cc0f6baf7c75ea386eaca8ce17a70238
- SHA512 a6aac5a8db552db4db1428859638747e9205f04aae70238c07f008028b8ed35e9529fa4afafaa90163adf7e274f7e5f701d205a34f6873b8f8d8e5a68193158d
- SSDEEP 12288:SzjjGKZL+ZU53YeWzZl7Vqx6ebZeB9sus42U2W9aCEBb:83+ZUitlxqxjZeBotM9aV
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

purelogstealer execution stealer
- PureLog Stealer
  PureLog Stealer is an infostealer written in C#.
  stealer purelogstealer
- PureLog Stealer payload
- Blocklisted process makes network request
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Suspicious use of SetThreadContext
behavioral1 behavioral2
- Target
  Adobe After Effects 2024 24.0.3.2 (x64) + Patch/Adobe After Effects 2024 24.0.3.2 (x64) + Patch/Setup/Set-up.exe
- Size 7.3MB
- SHA256 24d2666c00ecd02350af0d70c8a9b71ed2bf0ce2553e61506fc1cbba0a9156b3
- MD5 bc0672307ff08325dc4348c89bdc8999
- SHA1 45e37b595ac1b3ce6e3f6b6c12a9fa9c846addb4
- SHA512 406c11bd4dbda325ee679f235988e8d1643d99de4dfd648d471857eee4892001011ffcc3fb9d1cda3161bce4fda70dcb2e5e3f1c5fd9e75091d49a6954864728
- SSDEEP 98304:Rz16s9EwkidrwQwPdz9u/ZZmDZJErFXQbZT7wIX0k5:Rz16gBrd3gu/XmDZiF0tH
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4
- Target
  Adobe After Effects 2024 24.0.3.2 (x64) + Patch/Adobe After Effects 2024 24.0.3.2 (x64) + Patch/Setup/packages/setup.exe
- Size 9.6MB
- SHA256 9645ee20696ec08b04e3f4ed4a1240a676800354f8885e387a8dd7523fd4f3f1
- MD5 4dc40661d30996777a5a35ec24fec3ce
- SHA1 a73991cdbda052c6634301771cec5f3e2649db2a
- SHA512 e4dd50ff9f8de1541642723cd02dc64577e42a29e5bffb4d99858b0930ca0ac30e2f2f6ad7a5883afd447a6af226f4a1b4bd0a699bbd1da9d40a9781c879f9b1
- SSDEEP 196608:XpH3Sfz7FwECTXV1olC1Xr4Bf6U0uDL4O6Y9evCrHce3Nj2yMNuoT:XB3gFqzV1f1XI6UuO6YJZ9nyVT
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral5 behavioral6