Analysis
-
max time kernel
147s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
21-11-2024 20:01
General
-
Target
IMG1067410252030.exe
-
Size
39KB
-
MD5
d27638db84894d3fa4935dbdbd5078ff
-
SHA1
c2b33647e8db1433e3e7767817e337772923aff2
-
SHA256
309c3ea985cf1b4438ded762e48ee09b3699ef020e0f28c76e5c63c34e02af66
-
SHA512
c642ef89f09cf8d22a506d9bd23f2c5fdc6e297f586127eae0e7572cc39942955815fb9c40ed53d145fa24fb670ddb78e2d118f29f1c51ef7259116d8bc740c6
-
SSDEEP
384:8lOcFdQqiz80LBDl3pf/+BWV9isZ0CM7vliFhXgobglDMcmn6f60wwwwwwwwwwwH:8IkDu9LBjf2BWVwsi7vAfwo/NQs
Score
10/10
Malware Config
Extracted
Family
purecrypter
C2
http://13.231.238.12/dart/IMG1067410252030.png
Signatures
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Purecrypter family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\IMG1067410252030.exe"C:\Users\Admin\AppData\Local\Temp\IMG1067410252030.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
64KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB