purecrypter | 7cbf369e9b8fee8321e8c74e96128179f42d53e00d41eff07f97e872b945db0a | Triage

Sharing

General

Target

7cbf369e9b8fee8321e8c74e96128179f42d53e00d41eff07f97e872b945db0a.xz
Size

46KB
Sample

240822-l69kss1cpg
MD5

6eb1ef43c9ecc1a86897ffdb162aaa43
SHA1

55199f50d968248e0678a35cdf0a6890e08d29ae
SHA256

7cbf369e9b8fee8321e8c74e96128179f42d53e00d41eff07f97e872b945db0a
SHA512

a3c4f55c264f12c2872b518ef0a4e9cebf5d851bc912fdcfcefdbdba941462b116de139f5fc65040bf59be7d44bf8480880af70dd3d82fbc4c9a88f3ec55bd10
SSDEEP

768:w6OxmG9tXZ1O9eGYKKlmPkyaShdMv60toTzo83q0P+B6oaPMfFlf:A39BZYDImPka5TN3qs7MfFB

Score

10^/10

purecrypter discovery downloader loader

Malware Config

Extracted

Family

purecrypter

C2

https://etehadshipping.com/chmod permission 777/panel/Uslmwziyya.vdf

Targets

- Target
  
  Payment-Details/Payment-Details.scr
- Size
  
  129KB
- MD5
  
  eee76d74368111c385e634a9f4f5a9cf
- SHA1
  
  35a9afb88f649e243a1be654ef7aad6e5dafbce5
- SHA256
  
  82ee5c8372f9bc8ac9cfac2833c19d238fa8a60fa32e6d27d9fc781d2e64dc25
- SHA512
  
  c0abb244ebbb840260d0295b1181b02914e68f309509933e07a5048816b0a19d2f11336537c4eacc5a470b3f702f22bd92620cf7ad836e5ae0657eef1015f41f
- SSDEEP
  
  3072:1aEYLUfh5+u/Ua2HBrvyIBfn8+ux221Hll:1acfh5+CpK+
Score

10^/10

purecrypter discovery downloader loader
- PureCrypter
  PureCrypter is a .NET malware loader first seen in early 2021.
  loader downloader purecrypter
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

purecrypterdiscoverydownloaderloader

behavioral2

purecrypterdiscoverydownloaderloader