General
- Target PureDelete.exe
- Size 6.8MB
- Sample260702-srd9nsd12p
- SHA256 cbbff2e43d8d12dbb00f83d33799d12226cdf717c8b7b05d6047a6b102482072
- MD5 417126c2cad956e80827eae0ea0858c2
- SHA1 e704467ba4d8e4a16cfc926129800cacfb149d1a
- SHA512 618b27357abb8fc47e51b03e7ed51278d016ae33d3aab26860fedfd74dd702930ac872b8dfcaa237edd48480b4bf52bef67a785851e21fc78cf929d1e21e7085
- SSDEEP 98304:TR1UAx9XQsjA1h9eT393YigJhH0yfT+q2M51Y7uRlXgVLRuq97TgSKhOCJj2O:TQU9VjA1HeT39IigbauDXURuATa4A
- TLSH T1BB76336963B609F4F8B6913EC1B5C159F2B2B0664774D78F13B006631F27BA2583AF42
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
PureDelete.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
PureDelete.exe
Resource
win11ltsc2024-20260629-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target PureDelete.exe
- Size 6.8MB
- SHA256 cbbff2e43d8d12dbb00f83d33799d12226cdf717c8b7b05d6047a6b102482072
- MD5 417126c2cad956e80827eae0ea0858c2
- SHA1 e704467ba4d8e4a16cfc926129800cacfb149d1a
- SHA512 618b27357abb8fc47e51b03e7ed51278d016ae33d3aab26860fedfd74dd702930ac872b8dfcaa237edd48480b4bf52bef67a785851e21fc78cf929d1e21e7085
- SSDEEP 98304:TR1UAx9XQsjA1h9eT393YigJhH0yfT+q2M51Y7uRlXgVLRuq97TgSKhOCJj2O:TQU9VjA1HeT39IigbauDXURuATa4A
- TLSH T1BB76336963B609F4F8B6913EC1B5C159F2B2B0664774D78F13B006631F27BA2583AF42
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Possible privilege escalation attempt
-
Credentials from Password Stores: Windows Credential Manager
Suspicious access to Credentials History.
-
Loads dropped DLL
-
Modifies file permissions
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
2Credentials from Web Browsers
1Windows Credential Manager
1Unsecured Credentials
1Credentials In Files
1