Overview
overview
7Static
static
3Purity WIN...up.exe
windows10-2004-x64
7Purity WIN...up.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$R0.dll
windows10-2004-x64
3$R0.dll
windows11-ltsc_2024-x64
3$_4_/Purity.dll
windows10-2004-x64
3$_4_/Purity.dll
windows11-ltsc_2024-x64
3Purity.dll
windows10-2004-x64
3Purity.dll
windows11-ltsc_2024-x64
3Purity.exe
windows10-2004-x64
3Purity.exe
windows11-ltsc_2024-x64
3Purity.pdf
windows10-2004-x64
3Purity.pdf
windows11-ltsc_2024-x64
3msvcr80.dll
windows10-2004-x64
3msvcr80.dll
windows11-ltsc_2024-x64
3uninst Purity.exe
windows10-2004-x64
7uninst Purity.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3Analysis
- max time kernel
150s - max time network
140s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/08/2026, 19:03
Behavioral task
behavioral1
Sample
Purity WIN MAC/Purity_Setup.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral2
Sample
Purity WIN MAC/Purity_Setup.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral5
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral6
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral9
Sample
$R0.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral10
Sample
$R0.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral11
Sample
$_4_/Purity.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral12
Sample
$_4_/Purity.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral13
Sample
Purity.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral14
Sample
Purity.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral15
Sample
Purity.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral16
Sample
Purity.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral17
Sample
Purity.pdf
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral18
Sample
Purity.pdf
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral19
Sample
msvcr80.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral20
Sample
msvcr80.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral21
Sample
uninst Purity.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
uninst Purity.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral23
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
Behavioral task
behavioral25
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
Behavioral task
behavioral26
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
General
- Target Purity WIN MAC/Purity_Setup.exe
- Size 51.8MB
- Sample260807-xqftbssale
- SHA256 5a346e16df8a4e5b3af84833fac97469a3a268375b7181cfa61e5a2155e64adf
- MD5 aac0c1284f826f64b438fd548545c2f6
- SHA1 2d2c2b660fa3d956ee0ab3d1157458a736264b4b
- SHA512 0526c2065641a7289995c7027d1e57308eaf9664ee24589ea9720cef67bad07f7ab27a5b98939160a9d619b689986b87a86070df80b7c223161e7fae883874e1
- SSDEEP 786432:sz/s4XCJrQXhuHnYvw6rbMtmHcZ3oiqB6hyGBC3Ig4UTKVgEWkoG6ef3+yv:uD2EXIHhCQo8FoiAZ4UuVgEW/Gtv
- TLSH T1EDC73330112FC842D0B6687E242BB911B7AE3C997647BB66F1787039427B7D6CDE9213
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Loads dropped DLL 4 IoCs
pid Process 5996 Purity_Setup.exe 5996 Purity_Setup.exe 5996 Purity_Setup.exe 5996 Purity_Setup.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Drops file in System32 directory 2 IoCs
description ioc Process File opened for modification C:\Windows\SysWOW64\msvcr80.dll Purity_Setup.exe File created C:\Windows\SysWOW64\msvcr80.dll Purity_Setup.exe - Drops file in Program Files directory 54 IoCs
description ioc Process File created C:\Program Files (x86)\LUXONIX\Purity\040 Drum.pth Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\052 Bell & Perc.pth Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\Purity.exe Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\Purity.dll Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\033 Hat.wvt Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\057 Woodwind.pth Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\062 Fast Synth.pth Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\063 Slow Synth.pth Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\msvcr80.dll Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\uninst Purity.exe Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\Purity.ico Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\016 Brass.wvt Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\021 Basic Waveform.wvt Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\032 Tom.wvt Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\036 FXSound.wvt Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\030 Drum Loop.pth Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\Purity.jpg Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\001 GM Rhythm.smp Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\013 Guitar & Plucked.wvt Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\061 Bass Synth.pth Purity_Setup.exe File created C:\Program Files (x86)\Steinberg\Vstplugins\LUXONIX\Purity.dll Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\012 Percussive.wvt Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\014 Bass Guitar.wvt Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\017 Woodwind.wvt Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\030 Kick.wvt Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\031 Snare.wvt Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\035 Perc.wvt Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\001 GM Rhythm.pth Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\010 Motive.pth Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\001 GM Rhythm.wvt Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\010 Piano.wvt Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\015 Strings.wvt Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\050 Piano.pth Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\051 Organ.pth Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\064 Arpeggiator.pth Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\Purity.pdf Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\011 Organ.wvt Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\018 Synth.wvt Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\019 VOX.wvt Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\053 Bass Guitar.pth Purity_Setup.exe File opened for modification C:\Program Files (x86)\LUXONIX\Purity\LUXONIX.com Website.url Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\Microsoft.VC80.CRT.manifest Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\011 Factory Drum.smp Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\020 SFX.wvt Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\054 Guitar & Plucked.pth Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\055 Strings.pth Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\056 Brass.pth Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\060 Lead Synth.pth Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\000 GM Normal.smp Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\010 Factory Melody.smp Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\000 GM Normal.wvt Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\034 Cymbal.wvt Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\000 GM Normal.pth Purity_Setup.exe File created C:\Program Files (x86)\LUXONIX\Purity\020 Phrase.pth Purity_Setup.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Purity_Setup.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files (x86)\LUXONIX\Purity\Purity.exe
- Size 328KB
- SHA256 1d790e0fb5e574eb496bc674044b74d6b3c555f95bec238be37c7f118b30c929
- MD5 5cec7e66b017cf0cadf9b8eb2e3adac3
- SHA1 ec713a689f001e934258aa8c3fbae1502a279fd1
- SHA512 b7dbf45ce6db4e0df6c87cdafd677c7afa374db6e16d5b3073099536616c2757ad39b8b8b5d884046c674351569232762132673683c335931845349a7c3f7f82
- SSDEEP 6144:6DnLrJIyIzJXgJPLk88wbbXz6uU2yZAOeMVUYVhnkgbM9t:6LXSOH9UbZgMqYVhngt
- TLSH T18564AD3036E6C8B3C4A6413590EA8B1A6BBEBC56573455DB23A0BE1F8A357C04C773B5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg5DD7.tmp\InstallOptions.dll
- Size 14KB
- SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
- MD5 325b008aec81e5aaa57096f05d4212b5
- SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
- SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
- SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
- TLSH T1ED622A11778888F3DBD2013EB4533707AF9D5126B4929ED2CA271ECA6D2B05D7EB2346
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg5DD7.tmp\LangDLL.dll
- Size 5KB
- SHA256 60a964095af1be79f6a99b22212fefe2d16f5a0afd7e707d14394e4143e3f4f5
- MD5 9384f4007c492d4fa040924f31c00166
- SHA1 aba37faef30d7c445584c688a0b5638f5db31c7b
- SHA512 68f158887e24302673227adffc688fd3edabf097d7f5410f983e06c6b9c7344ca1d8a45c7fa05553adcc5987993df3a298763477168d4842e554c4eb93b9aaaf
- SSDEEP 48:iV6pAvmNC6iMPUptxEZK65x/AmvycNSmwVsOYJyvrpXptp/JvR0Jlof5d2:2811GED5ZTvycNSmwVsTJuftpZR0Sd2
- TLSH T129C18333B3C24AF5D6950633252373C366539E342359804F9B6712AA69208FBDD6E793
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg5DD7.tmp\System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- TLSH T1CA325C5993A0C1F3D5A0823C0D973A7B1779722016B14FA3CFA35842AE196D7AC7D227
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg5DD7.tmp\ioSpecial.ini
- Size 680B
- SHA256 f7faf8736a3b35a5c6e15749028ec33d647adc98f24e95da9c984c326ea3c7f9
- MD5 d6a0a098717c980a584f333c5ce68cef
- SHA1 cd4139e1501c19b7048026b78299c82a9c612cae
- SHA512 ec33623a8d5d55090247e07ef6669220dcb0d35190cbc3b39305277b7df50824bba3ef2e1aad5831b6b09892d383ed7fc85b3e0fde87dbefa30694236a259625
- TLSH T1750199C98119026A5824816664FA3F9143E01C30874939F0F8634CC3E78DDDAC8FD6D3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg5DD7.tmp\ioSpecial.ini
- Size 693B
- SHA256 e34a9a5dca822b6763082006891ebd4752b7366f5486f74e2427228d9edf1204
- MD5 45b83550a6a3d5ce3ee242e982f87f50
- SHA1 f5c70cd9b0f6960e56ece0f6462e568dd6cd1f64
- SHA512 2bd88d27edba11615c3382a4695fcb80be61d85cafba4cc310b91d80a8d9565726e293f9ec2e93b4848f067642fad57401648cb96dd2e3d4fb3b6c890e2be139
- TLSH T14D019E894159022E5810816665B93AD153E01E30874939F0F9634CC3D74DDDEC8FD5D3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg5DD7.tmp\ioSpecial.ini
- Size 723B
- SHA256 fced7c72d2e1dfc5d1377d24f08721dff90dc4213ff451aa35e2630c0aefe9ac
- MD5 d09223e359af252f9b1c24f94c0bfb40
- SHA1 ca9ab6b6422cbf84fc9d7e05df9fb35b054dec96
- SHA512 bae686d4ae28952f6659d765e0d78ccf8b1ba0ba5c78ae2df43d752be991a1328be4ae254aee75026d8dc7eea9f5611a8f8e28a557c3f8865023ca7ec6c02940
- TLSH T18E01C0C9855FA368046050A660F937D187E02D2C47553CF6F4538887938CDC78AEDED3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg5DD7.tmp\ioSpecial.ini
- Size 749B
- SHA256 ae0be35ad84959c95e6193572fcd08ae9433b5443289b7c3f4dd0b8d3ecf9287
- MD5 14b876e69a6633d4f1576d78bd8f1e81
- SHA1 f464f53739679544c5e41a0557637b1a29a62c5c
- SHA512 9ab249fcce0e49daa8827d7b6f5409b5f5bffa1f2e3c958c96e3366107193eb50e84150507f356fd915cc6c1102d973a328d6edbedd3659a139232d671372fca
- TLSH T1FE01DCC9846FA3A8446050A660FA3BD197E01C2C4B553CF1F4128886A38CDC78AEDEE3
- MD5 SHA1 SHA512 TLSH