General
- Target rl_44d331ead0c797fb4d53497a36a4ef931742e513691f86760d80603b8108f692
- Size 136KB
- Sample250624-rfhmaatkw4
- SHA256 44d331ead0c797fb4d53497a36a4ef931742e513691f86760d80603b8108f692
- MD5 77d40ee7dfdc0f9a3215a84de6c9e5c1
- SHA1 582b0d6efa958835ed6d5e7d9d64ab21ed849f52
- SHA512 7a6ae21db36f485c317b6db3a0c73a82be46cb3aa0e7d3892e4aa6629fd280d1ff91af2b829fc56f46bb5a80fc4a81f9eb88ed53160e3e0a07f91512075d3cac
- SSDEEP 384:KSn3L7V7R3nPLEmlhi4zUYfdwvIRY80+3U+Q25kFKO:KOn7PLdhiLmyvKY3kUfr
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
transferência de pagamento.exe
Resource
win10v2004-20250610-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
transferência de pagamento.exe
Resource
win11-20250610-en
14 signatures
150 seconds
Malware Config
Extracted
Family
-
purecrypter
C2
-
http://example.com/api/test
Targets
-
- Target transferência de pagamento.exe
- Size 75KB
- SHA256 201a6a8047b2621bf85356fa0ea76e3c6ce879cda9d2c5a319db5ce9e31ee8df
- MD5 4100f3608069e521e6f49a10e820c3f7
- SHA1 88b2e25d8046bcbf6948e7beb88fd8356e25aa17
- SHA512 2fb4a4d689b7e6ea1403bdbb1be7e2d027d58528c1c286ec96d743f9dece3fd30638355542e9125972288f49f12f494d92f2a5de4de9f82fc5dfb1a058f92087
- SSDEEP 384:P3L7V7R3nPLEmlhi4zUYfdwvIRY80+3U+Q25kFKO:Pn7PLdhiLmyvKY3kUfr
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
PureCrypter
PureCrypter is a .NET malware loader first seen in early 2021.
-
Purecrypter family
-
Accesses Microsoft Outlook profiles
-
Suspicious use of SetThreadContext