General
-
Target
eec2afdc09591bdbeb56778e59213e70N.exe
-
Size
232KB
-
Sample
240804-qdr79swbpr
-
MD5
eec2afdc09591bdbeb56778e59213e70
-
SHA1
dd7a57518c04015d7d849dccfe41ffb01aea5fc9
-
SHA256
306033847569814ac7afb92cb35ced5ac9766ed8385c83288fc4095ef7fc92a7
-
SHA512
fd1d4a5d431ef4891af337dcbe51a5a878b8a3959ed226402890b4db76e581bb946291e2b072176ce4a23903b86df75c0cfc8ab04e948b2c0182ac18cf0dd03d
-
SSDEEP
6144:k/ulgztrzTgzvhrLJyQNHbqLtte5v0WURyW:Mu2t0zprLFctNWURJ
Behavioral task
behavioral1
Sample
eec2afdc09591bdbeb56778e59213e70N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
eec2afdc09591bdbeb56778e59213e70N.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
eec2afdc09591bdbeb56778e59213e70N.exe
-
Size
232KB
-
MD5
eec2afdc09591bdbeb56778e59213e70
-
SHA1
dd7a57518c04015d7d849dccfe41ffb01aea5fc9
-
SHA256
306033847569814ac7afb92cb35ced5ac9766ed8385c83288fc4095ef7fc92a7
-
SHA512
fd1d4a5d431ef4891af337dcbe51a5a878b8a3959ed226402890b4db76e581bb946291e2b072176ce4a23903b86df75c0cfc8ab04e948b2c0182ac18cf0dd03d
-
SSDEEP
6144:k/ulgztrzTgzvhrLJyQNHbqLtte5v0WURyW:Mu2t0zprLFctNWURJ
Score10/10-
PureLog Stealer payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Legitimate hosting services abused for malware hosting/C2
-