Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21-12-2024 19:12
General
-
Target
IMG-1112001.exe
-
Size
17KB
-
MD5
09a3e7bf8b28a94b0073e2c8e941eddf
-
SHA1
9b1ab482b209445290c712f84c11234792c673d2
-
SHA256
f5a1223e98d7bfd9dbe38c505e50368944ad48917ca61e30abe084a0803c34cc
-
SHA512
16446fa18f2ad04ba2510f26a55063290264304a1259b48894e1c155fa38cb532a1602f25839c604a09bffcfe6093caa1cb3aaa4572c6eae26bb56b59fa580eb
-
SSDEEP
192:7FwfHFLuygm27WJHzHiYumXtlbEWmhWI:KfHMygz7WVcWmhW
Score
10/10
Malware Config
Extracted
Family
purecrypter
C2
https://iriseagle.com/img/loader/uploads/Xbkorlx.png
Signatures
-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Purecrypter family
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\IMG-1112001.exe"C:\Users\Admin\AppData\Local\Temp\IMG-1112001.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
40KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
7.7MB
-
Filesize
40KB
-
Filesize
4KB
-
Filesize
7.7MB