General
- Target 827efcd152a3b51afd8df0efbd90e955cd630281cfa2f9ef2a10860b0e8e99fa
- Size 4KB
- Sample250624-ege7bsxwc1
- SHA256 827efcd152a3b51afd8df0efbd90e955cd630281cfa2f9ef2a10860b0e8e99fa
- MD5 9bacacba79cec82212805e5418a7f0a2
- SHA1 ac13da294741cfbb07b7a8db0cc25ea9aa98f64a
- SHA512 a7a6ae9dc4c6d51e0cc13c4d9a3b83894876bbc90fb1056d2f5cf91c139de440537e648c736520799316d88622763003e711b0b049fdbdf461f061b181351e1d
- SSDEEP 96:xxFOfCmKNw8iwR7T1Mk1nUBUI/OZdIJAqx0z05fE0yeGFUe:xFHiwXLI6diyyfpnGie
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
New_Order Project.scr
Resource
win10v2004-20250610-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
New_Order Project.scr
Resource
win11-20250619-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
purecrypter
C2
-
http://example.com/api/test
Targets
-
- Target New_Order Project.scr
- Size 9KB
- SHA256 372002e969e2ab50f3d6423181051dabfbb4cb41b33bdc3dc78327c449f0a67f
- MD5 0958a817bd75633f742c11699a1fa85c
- SHA1 ba110ca5909d4182eaaa82a2da0fa0c133a01c15
- SHA512 6493b89b689e030abc1c5b0da02589405834f05453dd654af4e5e33c9b43f8434bf6b9ff092686447dfef0cf517945a07a4b7040c08abd3ea3107f5fad936f6b
- SSDEEP 192:kVXDIyIXzm9N6o81y079391sawCJl5L4+qzIp:0FM17934j8G+q0
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Purecrypter family
-
Drops startup file
-
Suspicious use of SetThreadContext