Overview

overview

10

Static

static

10

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    80a4325072a8d0587da28929a497d615433addcab45caf75ac0e75d28b6d0dff

  • Size

    1.0MB

  • Sample

    240726-3gfpvsvdna

  • MD5

    31759297fa8b62fb1cc998c1a229d14d

  • SHA1

    6e345255abe76ca34768c514bd4558f301c99a78

  • SHA256

    80a4325072a8d0587da28929a497d615433addcab45caf75ac0e75d28b6d0dff

  • SHA512

    62ca2bc18179da07fcb42298f5aa6dc9f31fa4dbaadb97bcd8892220d5584a23ea7ffd339b301cb1a79cfcdb5de2d12bd780556f760f5c66d2f0bec59b633b16

  • SSDEEP

    24576:6xo4lc+Bbl93QooSZpg0K1iImadvQVqLySyBnjQV3rITD:+b73nbZNK1inq+w3rIX

Score
10/10
purelogstealersmokeloaderbackdoordiscoverystealertrojan

Malware Config

Targets

    • Target

      80a4325072a8d0587da28929a497d615433addcab45caf75ac0e75d28b6d0dff

    • Size

      1.0MB

    • MD5

      31759297fa8b62fb1cc998c1a229d14d

    • SHA1

      6e345255abe76ca34768c514bd4558f301c99a78

    • SHA256

      80a4325072a8d0587da28929a497d615433addcab45caf75ac0e75d28b6d0dff

    • SHA512

      62ca2bc18179da07fcb42298f5aa6dc9f31fa4dbaadb97bcd8892220d5584a23ea7ffd339b301cb1a79cfcdb5de2d12bd780556f760f5c66d2f0bec59b633b16

    • SSDEEP

      24576:6xo4lc+Bbl93QooSZpg0K1iImadvQVqLySyBnjQV3rITD:+b73nbZNK1inq+w3rIX

    Score
    10/10
    purelogstealersmokeloaderbackdoordiscoverystealertrojan

    • PureLog Stealer

      PureLog Stealer is an infostealer written in C#.

      stealerpurelogstealer

    • PureLog Stealer payload

    • SmokeLoader

      Modular backdoor trojan in use since 2014.

      trojanbackdoorsmokeloader

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks