Overview

overview

10

Static

static

10

428792c0a5...3e.exe

windows7-x64

10

428792c0a5...3e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    428792c0a53e4218e0ad0c79b9e3040637977ae118b60aeb6ee1d9a45bb33a3e

  • Size

    11.4MB

  • Sample

    241107-l6rd8asqfk

  • MD5

    6f6bb833a8191f08decacba9730e6d7d

  • SHA1

    0597752575d4f9b9d71f5951506f6a0a6b4645e7

  • SHA256

    428792c0a53e4218e0ad0c79b9e3040637977ae118b60aeb6ee1d9a45bb33a3e

  • SHA512

    7e143310c40100b1ce85504e755a8686d5a5345e03fae4f28e618102ac2e852edee0e004524204cdbb1d3f0a6b411a4c7c037cb7bb8f5111a68ac4ca945013b6

  • SSDEEP

    196608:tpbyXKAoNI2BF/f6BVGTgxVG8VGb3bvGenj01x5DkQ9L/5fgnpjEDIbRp8g6bCzy:+XKAmNeBCbQ9LRsZ/8g6bCzoPAc+Qpce

Score
10/10
purplefoxdiscoveryrootkittrojan

Malware Config

Targets

    • Target

      428792c0a53e4218e0ad0c79b9e3040637977ae118b60aeb6ee1d9a45bb33a3e

    • Size

      11.4MB

    • MD5

      6f6bb833a8191f08decacba9730e6d7d

    • SHA1

      0597752575d4f9b9d71f5951506f6a0a6b4645e7

    • SHA256

      428792c0a53e4218e0ad0c79b9e3040637977ae118b60aeb6ee1d9a45bb33a3e

    • SHA512

      7e143310c40100b1ce85504e755a8686d5a5345e03fae4f28e618102ac2e852edee0e004524204cdbb1d3f0a6b411a4c7c037cb7bb8f5111a68ac4ca945013b6

    • SSDEEP

      196608:tpbyXKAoNI2BF/f6BVGTgxVG8VGb3bvGenj01x5DkQ9L/5fgnpjEDIbRp8g6bCzy:+XKAmNeBCbQ9LRsZ/8g6bCzoPAc+Qpce

    Score
    10/10
    purplefoxdiscoveryrootkittrojan

    • Detect PurpleFox Rootkit

      Detect PurpleFox Rootkit.

      rootkit

    • PurpleFox

      PurpleFox is an exploit kit used to distribute other malware families and first seen in 2018.

      rootkittrojanpurplefox

    • Purplefox family

      purplefox

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks