General

  • Target

    eec2afdc09591bdbeb56778e59213e70N.exe

  • Size

    232KB

  • Sample

    240804-qdr79swbpr

  • MD5

    eec2afdc09591bdbeb56778e59213e70

  • SHA1

    dd7a57518c04015d7d849dccfe41ffb01aea5fc9

  • SHA256

    306033847569814ac7afb92cb35ced5ac9766ed8385c83288fc4095ef7fc92a7

  • SHA512

    fd1d4a5d431ef4891af337dcbe51a5a878b8a3959ed226402890b4db76e581bb946291e2b072176ce4a23903b86df75c0cfc8ab04e948b2c0182ac18cf0dd03d

  • SSDEEP

    6144:k/ulgztrzTgzvhrLJyQNHbqLtte5v0WURyW:Mu2t0zprLFctNWURJ

Malware Config

Targets

    • Target

      eec2afdc09591bdbeb56778e59213e70N.exe

    • Size

      232KB

    • MD5

      eec2afdc09591bdbeb56778e59213e70

    • SHA1

      dd7a57518c04015d7d849dccfe41ffb01aea5fc9

    • SHA256

      306033847569814ac7afb92cb35ced5ac9766ed8385c83288fc4095ef7fc92a7

    • SHA512

      fd1d4a5d431ef4891af337dcbe51a5a878b8a3959ed226402890b4db76e581bb946291e2b072176ce4a23903b86df75c0cfc8ab04e948b2c0182ac18cf0dd03d

    • SSDEEP

      6144:k/ulgztrzTgzvhrLJyQNHbqLtte5v0WURyW:Mu2t0zprLFctNWURJ

    • PureLog Stealer

      PureLog Stealer is an infostealer written in C#.

    • PureLog Stealer payload

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks