Overview

overview

7

Static

static

3

Purble Place.exe

windows10-2004-x64

7

Vista.Emulation.dll

windows10-2004-x64

3

Resubmissions

18/04/2026, 04:58

260418-fl62aaay6j7

17/04/2026, 21:34

260417-1ext9acs6s7

Sharing

Copy URL Twitter E-mail

General

  • Target
    purble_place.zip
  • Size 58.8MB
  • Sample260418-fl62aaay6j
  • SHA256 a5890e0ca5913af5a558afda35fcc5cfe8a2a31b6694059d110b8114050425c2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Targets

    • Target
      Purble Place.exe
    • Size 59.1MB
    • SHA256 c0d94c0006a0eaef4426c9e36fae15f41cac3f00d9454a8286b5840af18e77ed
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1
    • Target
      Vista.Emulation.dll
    • Size 60KB
    • SHA256 ab99feb022a466a13a38fe4088bc62b7fd3a74d50ed3a248c95f37bb57926794
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral2

MITRE ATT&CK Enterprise v16

Tasks