890e72937795767005e8b30415aadaab288d024366439627a8cc1725b365574c | Triage™

Login
Reports

Overview

overview

7

Static

static

3

Purity WIN...up.exe

windows10-2004-x64

7

Purity WIN...up.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$R0.dll

windows10-2004-x64

3

$R0.dll

windows11-ltsc_2024-x64

3

$_4_/Purity.dll

windows10-2004-x64

3

$_4_/Purity.dll

windows11-ltsc_2024-x64

3

Purity.dll

windows10-2004-x64

3

Purity.dll

windows11-ltsc_2024-x64

3

Purity.exe

windows10-2004-x64

3

Purity.exe

windows11-ltsc_2024-x64

3

Purity.pdf

windows10-2004-x64

3

Purity.pdf

windows11-ltsc_2024-x64

3

msvcr80.dll

windows10-2004-x64

3

msvcr80.dll

windows11-ltsc_2024-x64

3

uninst Purity.exe

windows10-2004-x64

7

uninst Purity.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Purity WIN MAC.zip
Size 51.7MB
Sample260807-xqftbssale
SHA256 890e72937795767005e8b30415aadaab288d024366439627a8cc1725b365574c
MD5 fef3c9d47a9d884e899fb156c6879707
SHA1 231e6bfbd4f8b0ccae7c43da599e9a4dd97d5a13
SHA512 b5d562f95842ed1048f0a08f653442d1d132e17de757ee8cb7dd6471d1e2065a54fa0ac68cb7d936ac3a32818cee06ab1f0f98e69f9c059ab881748d88c516f5
SSDEEP 786432:0vL0aRm1LYRT8ftsj4Kh9yZu7uvlaWAlGZeC9GNKIeiT4dy0wh404w5BiKp:QJekRAFJyYIKdaWg/eiMdy0wucPp
TLSH
T109C73330412F9C41D0B6797E242BB851B7AE319A7647FBA6E479133882577E6CDE8203
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

adware discovery installer link pdf spyware

Static task

static1

4 signatures

pdf link installer

Behavioral task

behavioral1

Sample

Purity WIN MAC/Purity_Setup.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

Purity WIN MAC/Purity_Setup.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

6 signatures

150 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral4

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral5

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral6

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral7

Sample

$PLUGINSDIR/System.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

$PLUGINSDIR/System.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

$R0.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral10

Sample

$R0.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral11

Sample

$_4_/Purity.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral12

Sample

$_4_/Purity.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral13

Sample

Purity.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral14

Sample

Purity.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral15

Sample

Purity.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

Purity.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

Purity.pdf

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral18

Sample

Purity.pdf

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral19

Sample

msvcr80.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral20

Sample

msvcr80.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral21

Sample

uninst Purity.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

discovery installer

Behavioral task

behavioral22

Sample

uninst Purity.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

7 signatures

150 seconds

discovery installer

Behavioral task

behavioral23

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral24

Sample

$PLUGINSDIR/InstallOptions.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral25

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral26

Sample

$PLUGINSDIR/LangDLL.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  Purity WIN MAC/Purity_Setup.exe
- Size 51.8MB
- SHA256 5a346e16df8a4e5b3af84833fac97469a3a268375b7181cfa61e5a2155e64adf
- MD5 aac0c1284f826f64b438fd548545c2f6
- SHA1 2d2c2b660fa3d956ee0ab3d1157458a736264b4b
- SHA512 0526c2065641a7289995c7027d1e57308eaf9664ee24589ea9720cef67bad07f7ab27a5b98939160a9d619b689986b87a86070df80b7c223161e7fae883874e1
- SSDEEP 786432:sz/s4XCJrQXhuHnYvw6rbMtmHcZ3oiqB6hyGBC3Ig4UTKVgEWkoG6ef3+yv:uD2EXIHhCQo8FoiAZ4UuVgEW/Gtv
- TLSH
  T1EDC73330112FC842D0B6687E242BB911B7AE3C997647BB66F1787039427B7D6CDE9213
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- MD5 325b008aec81e5aaa57096f05d4212b5
- SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
- TLSH
  T1ED622A11778888F3DBD2013EB4533707AF9D5126B4929ED2CA271ECA6D2B05D7EB2346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5
- MD5 9384f4007c492d4fa040924f31c00166
- SHA1 aba37faef30d7c445584c688a0b5638f5db31c7b
- SHA512 68f158887e24302673227adffc688fd3edabf097d7f5410f983e06c6b9c7344ca1d8a45c7fa05553adcc5987993df3a298763477168d4842e554c4eb93b9aaaf
- SSDEEP 48:iV6pAvmNC6iMPUptxEZK65x/AmvycNSmwVsOYJyvrpXptp/JvR0Jlof5d2:2811GED5ZTvycNSmwVsTJuftpZR0Sd2
- TLSH
  T129C18333B3C24AF5D6950633252373C366539E342359804F9B6712AA69208FBDD6E793
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- TLSH
  T1CA325C5993A0C1F3D5A0823C0D973A7B1779722016B14FA3CFA35842AE196D7AC7D227
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $R0
- Size 617KB
- SHA256 9382aaed2db19cd75a70e38964f06c63f19f63c9dfb5a33b0c2d445bb41b6e46
- MD5 1169436ee42f860c7db37a4692b38f0e
- SHA1 4ccd15bf2c1b1d541ac883b0f42497e8ced6a5a3
- SHA512 e06064eb95a2ab9c3343672072f5b3f5983fc8ea9e5c92f79e50ba2e259d6d5fa8ed97170dea6d0d032ea6c01e074eefaab850d28965c7522fb7e03d9c65eae0
- SSDEEP 12288:bxzh9hH5RVKTp0G+vjhr46CIw+0yZmGyYCj:bph9hHzVKOpXwymGyYo
- TLSH
  T196D4CF51B5E3C472D0B201B5490ADB3A9A3BB9504638A8737BE60FCE4E787D1FB17252
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  $_4_/Purity.dll
- Size 4.0MB
- SHA256 53e68f8db449580fb51eddb573bdef21901065eb4df9f31ba4747072160d33cc
- MD5 be6178ac796756340d892abc423ad21c
- SHA1 e8adf475efc25eea4abd4e41cb26b34724a8abc7
- SHA512 64a0a3de69c1c13442be5c9fbd8396223b2a8392de3fa62ae93f04cd63e15e79878e800f6c357e66ff484f68ddc3a87ad65c265c51243d296573c52405703371
- SSDEEP 49152:bgUWXEvPLfjI8f10Szr78O+hzi48MJxNHeLV2F2JvPZmLklaBfg:bgUWUvPLfjI8fLzX8dzi48MJxReVb2
- TLSH
  T17416D758E93D1EC8FA78693C5174F1808A914E5DA301E56FB8ACFA918D373903678F9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  Purity.dll
- Size 4.0MB
- SHA256 53e68f8db449580fb51eddb573bdef21901065eb4df9f31ba4747072160d33cc
- MD5 be6178ac796756340d892abc423ad21c
- SHA1 e8adf475efc25eea4abd4e41cb26b34724a8abc7
- SHA512 64a0a3de69c1c13442be5c9fbd8396223b2a8392de3fa62ae93f04cd63e15e79878e800f6c357e66ff484f68ddc3a87ad65c265c51243d296573c52405703371
- SSDEEP 49152:bgUWXEvPLfjI8f10Szr78O+hzi48MJxNHeLV2F2JvPZmLklaBfg:bgUWUvPLfjI8fLzX8dzi48MJxReVb2
- TLSH
  T17416D758E93D1EC8FA78693C5174F1808A914E5DA301E56FB8ACFA918D373903678F9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  Purity.exe
- Size 328KB
- SHA256 1d790e0fb5e574eb496bc674044b74d6b3c555f95bec238be37c7f118b30c929
- MD5 5cec7e66b017cf0cadf9b8eb2e3adac3
- SHA1 ec713a689f001e934258aa8c3fbae1502a279fd1
- SHA512 b7dbf45ce6db4e0df6c87cdafd677c7afa374db6e16d5b3073099536616c2757ad39b8b8b5d884046c674351569232762132673683c335931845349a7c3f7f82
- SSDEEP 6144:6DnLrJIyIzJXgJPLk88wbbXz6uU2yZAOeMVUYVhnkgbM9t:6LXSOH9UbZgMqYVhngt
- TLSH
  T18564AD3036E6C8B3C4A6413590EA8B1A6BBEBC56573455DB23A0BE1F8A357C04C773B5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  Purity.pdf
- Size 5.8MB
- SHA256 030fc6fa8d631a33b5ba7cb8e6b87ebd32078eb59a41046f65129fa5dd9125bd
- MD5 008c72746e787c5ef253b1fba3c18971
- SHA1 53c5c2ee202aa3d7f87e5b230d4490984c7df03a
- SHA512 44891741d105f163c140aa3146f392e7ff037ba20631f8c894c3d4842c7db92bd75cb1b5c77e82ab2c5dd7301f4d81377a8a73a7c27744b22a6e7f49a59f1f12
- SSDEEP 98304:TPwg0HtUYFw9xH4KCjS4SDzSAFsRaVJGUNDBTM2xzDjUi6WashM:zAUPxTCYzTuQV11HxzDAWaZ
- TLSH
  T1C856334C86476C9CF566171538059C5ECDBB3893C88CB8737F6DEAA107C8EAE40A6ED4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  msvcr80.dll
- Size 617KB
- SHA256 9382aaed2db19cd75a70e38964f06c63f19f63c9dfb5a33b0c2d445bb41b6e46
- MD5 1169436ee42f860c7db37a4692b38f0e
- SHA1 4ccd15bf2c1b1d541ac883b0f42497e8ced6a5a3
- SHA512 e06064eb95a2ab9c3343672072f5b3f5983fc8ea9e5c92f79e50ba2e259d6d5fa8ed97170dea6d0d032ea6c01e074eefaab850d28965c7522fb7e03d9c65eae0
- SSDEEP 12288:bxzh9hH5RVKTp0G+vjhr46CIw+0yZmGyYCj:bph9hHzVKOpXwymGyYo
- TLSH
  T196D4CF51B5E3C472D0B201B5490ADB3A9A3BB9504638A8737BE60FCE4E787D1FB17252
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  uninst Purity.exe
- Size 212KB
- SHA256 5869a0ebad4731751c9c21975a2861363fabd79985fe93d3c4cb3595a6da23c7
- MD5 cd3286e328c8f5a6cfc58bccfdc6b6ba
- SHA1 a39ff471ec081ec1a89d5511e1a87fd1c2e4462d
- SHA512 a96ca8cc6ee6e26940345bbeb2a639577322b03fa0146f24ba5fca3e7a1313c3e7911fb8a3b232dab75a958a3acbb970466979089d5fb90b05602c4b3142b53a
- SSDEEP 3072:XLk395hYXJewl03IT2TkMjKK1HNz0DPWFjdhdWdyWmlvJYDBW7gYN:XQqkwkI6kMBn0KFj18IYWF
- TLSH
  T190248C447188846BCE5A42334F279B5FE9634ADD5D30211B2AACAF6F393737711288F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral21 behavioral22
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- MD5 325b008aec81e5aaa57096f05d4212b5
- SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
- TLSH
  T1ED622A11778888F3DBD2013EB4533707AF9D5126B4929ED2CA271ECA6D2B05D7EB2346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5
- MD5 9384f4007c492d4fa040924f31c00166
- SHA1 aba37faef30d7c445584c688a0b5638f5db31c7b
- SHA512 68f158887e24302673227adffc688fd3edabf097d7f5410f983e06c6b9c7344ca1d8a45c7fa05553adcc5987993df3a298763477168d4842e554c4eb93b9aaaf
- SSDEEP 48:iV6pAvmNC6iMPUptxEZK65x/AmvycNSmwVsOYJyvrpXptp/JvR0Jlof5d2:2811GED5ZTvycNSmwVsTJuftpZR0Sd2
- TLSH
  T129C18333B3C24AF5D6950633252373C366539E342359804F9B6712AA69208FBDD6E793
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25 behavioral26

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

pdflinkinstaller

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

adwarediscoveryspyware

behavioral18

adwarediscoveryspyware

behavioral19

behavioral20

behavioral21

discoveryinstaller

behavioral22

discoveryinstaller

behavioral23

behavioral24

behavioral25

behavioral26

© 2018-2026

Terms | Privacy