General

  • Target

    b71836316f2222c3651e8a99cf6432a0N.exe

  • Size

    1.3MB

  • Sample

    240824-xzz9bswgrn

  • MD5

    b71836316f2222c3651e8a99cf6432a0

  • SHA1

    b175856f4556c960dcd75384aa3172c1ac2968ba

  • SHA256

    cf39da21fcf7f367eb0df5e02d1f1dc8c88126482199d5db386e78660f1b570a

  • SHA512

    b20194b370a2cfdce43d8ef8458c4376691e22523771d52d17ce4112b1e4cfe5a82641767ed204506797165e619a176000fed156565acb753e89cc6f228309ea

  • SSDEEP

    24576:JbUfjlJfLcXI86oA+uzJtoehgDvGrtqb5SxYJQ1qm64bX:+fjjzx86v/JtodDvy+SGyqmPX

Malware Config

Targets

    • Target

      b71836316f2222c3651e8a99cf6432a0N.exe

    • Size

      1.3MB

    • MD5

      b71836316f2222c3651e8a99cf6432a0

    • SHA1

      b175856f4556c960dcd75384aa3172c1ac2968ba

    • SHA256

      cf39da21fcf7f367eb0df5e02d1f1dc8c88126482199d5db386e78660f1b570a

    • SHA512

      b20194b370a2cfdce43d8ef8458c4376691e22523771d52d17ce4112b1e4cfe5a82641767ed204506797165e619a176000fed156565acb753e89cc6f228309ea

    • SSDEEP

      24576:JbUfjlJfLcXI86oA+uzJtoehgDvGrtqb5SxYJQ1qm64bX:+fjjzx86v/JtodDvy+SGyqmPX

    • PureLog Stealer

      PureLog Stealer is an infostealer written in C#.

    • PureLog Stealer payload

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks