General

  • Target

    JaffaCakes118_0dd86dcb86cc31b25987d1e8a5cc66a9377768d4134dc17c52d0252c04e720a6

  • Size

    13KB

  • Sample

    241224-ctqsgsyqdz

  • MD5

    3b17340ba3d0ae3480e19749deeae596

  • SHA1

    2e2a1ac5934433154785333298ecd90afbc4cc7d

  • SHA256

    0dd86dcb86cc31b25987d1e8a5cc66a9377768d4134dc17c52d0252c04e720a6

  • SHA512

    126844f3dc226ac85d1528c7160b6d7ac7a6b7e7c6aab960bcc5721ce8dab831bf717ccbf58aa259108fb898aa5f6f076fb51a5c9ef9e3f5bd20b9df7cc94fbe

  • SSDEEP

    384:zJPrpSI+sAtNS1L8+zWYv+hbzX00aB4sufffffehB:zWSV8+Kxbb0yk

Malware Config

Extracted

Family

purecrypter

C2

http://safeinthehandsofthegoodbois.com/loader/uploads/Aslrz_Ethapkbn.png

Targets

    • Target

      JaffaCakes118_0dd86dcb86cc31b25987d1e8a5cc66a9377768d4134dc17c52d0252c04e720a6

    • Size

      13KB

    • MD5

      3b17340ba3d0ae3480e19749deeae596

    • SHA1

      2e2a1ac5934433154785333298ecd90afbc4cc7d

    • SHA256

      0dd86dcb86cc31b25987d1e8a5cc66a9377768d4134dc17c52d0252c04e720a6

    • SHA512

      126844f3dc226ac85d1528c7160b6d7ac7a6b7e7c6aab960bcc5721ce8dab831bf717ccbf58aa259108fb898aa5f6f076fb51a5c9ef9e3f5bd20b9df7cc94fbe

    • SSDEEP

      384:zJPrpSI+sAtNS1L8+zWYv+hbzX00aB4sufffffehB:zWSV8+Kxbb0yk

    • PureCrypter

      PureCrypter is a .NET malware loader first seen in early 2021.

    • Purecrypter family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks