Overview
overview
8Static
static
1purolator/...xid.js
windows10-2004-x64
3purolator/...xid.js
windows11-ltsc_2024-x64
8purolator/...nee.js
windows10-2004-x64
3purolator/...nee.js
windows11-ltsc_2024-x64
3purolator/...dex.js
windows10-2004-x64
3purolator/...dex.js
windows11-ltsc_2024-x64
3purolator/app/info.js
windows10-2004-x64
3purolator/app/info.js
windows11-ltsc_2024-x64
8purolator/...ing.js
windows10-2004-x64
3purolator/...ing.js
windows11-ltsc_2024-x64
3General
- Target purolator.zip
- Size 708KB
- Sample260621-pd1c7sds2m
- SHA256 e2805a635bf75f1c906947ad8044d65d372c8bbd1dc1d041eb29e317f0bf7317
- MD5 1c6f98e013e9d95525b13955a8e820ea
- SHA1 4794d22cd80b8ed10672d802e63e80a1c0f8d661
- SHA512 fa58888d24d1b77c9d00294b3a957fd72c88cb8f97924a8871b44d92eacadb538cf1b6b0a6ba21439eb1bdb3ea4714dc52eb335794bcdc3fd165855d8c9ea4a3
- SSDEEP 12288:nOw87W4njyhlPrXje6U+lRJeSRDubb21WAwTCxfzk3X8j1MBq6tRwhtQ8NLt:raGTBzSbb2cAwTC9k8jAqnPQ8dt
- TLSH T15CF42386FE6CA420F459583B30EF93AD0C9713064C45C14B6AFC2A74AD59B2AF3B17B4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
purolator/app/boxid.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
purolator/app/boxid.js
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral3
Sample
purolator/app/donee.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
purolator/app/donee.js
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral5
Sample
purolator/app/index.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
purolator/app/index.js
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral7
Sample
purolator/app/info.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
purolator/app/info.js
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral9
Sample
purolator/app/loading.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
purolator/app/loading.js
Resource
win11ltsc2024-20260617-en
Malware Config
Targets
-
- Target purolator/app/boxid.php
- Size 37KB
- SHA256 5d0bc02b13923046e117ea7913231711aec80352248a0d7586379fff2c84a581
- MD5 c1c869fe0f9b1a8d4293dc8a7f61981e
- SHA1 cb620fea0045d87313b285fac8471e181978e83d
- SHA512 dd49203733ec5a32afe4fbac77aaea27df878f515d1759b1aab56e096dd4cf76b64b3445d33bd36e96c053f8cd58ed48b4ca396fe7fa7ac717587a4b0e134f11
- SSDEEP 768:aqp5Hj9bCZSqDXWTCwuHu+d+K6L4xLaZN7:aqp5tCZSqjWTCwuHu+d+X0taZN7
- TLSH T155030953114B1062193A3EF5DDC63A08E724E113C6039385F5EFA1D88FFE7A88A6579D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target purolator/app/donee.php
- Size 9KB
- SHA256 99586a5fd0abcb62cc34f5255ecac6b721cc9afe9ec0b17c5a690060702f0f6c
- MD5 66ce2ef652a2aaa58f1941f228e49fe3
- SHA1 d9cbe01b28db5fcacc690033304a805710a2d2fa
- SHA512 8f9f5aa230118cf2946b4c2204275891c9128c6cfe01985d70eea5c337b173b47393fc924d7bd6512f8e304d12f4c1d5372bc3938bb211fab6957d2dce0f2a5a
- SSDEEP 192:swCcu9K1XDMKKKymPGM3gHaj+dw2GEXkaHzHT:swe9KNMKKKymPGMduP
- TLSH T1C722534311C21018A2379D94AC966B44D7B40267C38651B23B8FD28CCFFDBE6635AB9F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target purolator/app/index.php
- Size 7KB
- SHA256 b8f723bfacc0cfb01a89d8f8c19f5b8879446e6b70e56e7c1775435272cb8e8c
- MD5 6a80e8791c42d111c67d75f7cc0c6619
- SHA1 9a5e0ada00f990aa670d9ecbec6ae2400df7c3f5
- SHA512 aaf5f67e80a4caa4084551d48c40146e4f975cdaf9e84f71f0e867f793a0989b1595d8481a5842cc268049aec53f06b546ef2639e617c2c1fde9c6c3b85aef8d
- SSDEEP 96:Q7jKmX6npX4fXOFgVEB0Wx7WCGDJRvyTCtg1d/EFnDzeXvNwkwfup68y/AZgn:EjYWvOmVE9WCYyTCOsDg6tfE+/ACn
- TLSH T10BF1B499211E14615277E77CAB578808FA7A561B5605410C3E9C90C87FF839CC2E7FEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target purolator/app/info.php
- Size 31KB
- SHA256 488fb07d1ec647366376bc803683973e727c27896c12d28a4a787afcdd1c9682
- MD5 1b4a9a88727796d5c425f31295239700
- SHA1 afb0e7f8e4c2522a6d1bdc1958e307f02cce59de
- SHA512 130060a0ad7b31edb6cfa42ab0bd65e2c1a89a8a913d52d57036ef5ffc3b51f3f37ea4ebcc6136dc06e05b1f0e8a6a06ce62db968ff0d61913196615a8428067
- SSDEEP 384:kdgWjQ9a1knZCrHyu6QGN3H+soJpdlbYFLi2xWpxtrJq+Uje1ldhpzKa:ojQ9a18Z6Hyu6QGN3HZoJpdlbYFpCXh
- TLSH T1A5E2636320C11018563B9DA4AC95A709E7B04227C38641513B9FD3CA5FFEFA4971BBAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target purolator/app/loading.php
- Size 49KB
- SHA256 82c9c5456624fdda0154ab425322e8cc3c4571f8a427e224c26a83018786ceeb
- MD5 eacffbe076b2163972e263ac06b67574
- SHA1 91792e1da4078861f3f543232678487dba64acc5
- SHA512 9c10313683333e39531d022a0caf48903b90847f09db8441993fe926602c024e95e1a6338f470ed52e92c2125235ab92719f2402e77d1639f476246360fd821d
- SSDEEP 768:9T9IMN+Yq5bQo87Vmp63xMjASy5+HZwvZkerowUb2xZrRTKVduWmeewZ96v4yLH:XIOFt3ipqi5wUb2xzKvZ9m44H
- TLSH T1EF33D046648204DC9A350D329851BE58DFF59E130B996870779FC08F9FB8BD8A3CBA53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10