Overview

overview

7

Static

static

3

pure_visio...pu.exe

windows10-2004-x64

7

pure_visio...pu.exe

windows11-ltsc_2024-x64

1

Analysis

  • user interaction
    yes
  • max time kernel
    38s
  • max time network
    115s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    24/10/2026, 22:03

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    pure_vision_nvidia_gpu.exe
  • Size 1586.4MB
  • Sample261024-1ys1eaxtdx
  • SHA256 e22f665852dadae09971291c7c1838c068f8e3c12e2c0ead7c3b033036e98901
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\pure_vision_nvidia_gpu.exe
    "C:\Users\Admin\AppData\Local\Temp\pure_vision_nvidia_gpu.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3220
    • C:\Windows\TEMP\{BE83BE2F-6684-49B4-A85F-5A5745E75532}\.ba\wixstdba.exe
      "C:\Windows\TEMP\{BE83BE2F-6684-49B4-A85F-5A5745E75532}\.ba\wixstdba.exe" -burn.ba.apiver 569705357157400576 -burn.ba.pipe BurnPipe.{9FAB8BCA-1C7C-47F2-8EBF-C093D45F0B5B} {B94366A9-E6F5-4CB7-9300-2E8B01CF152A}
      2⤵
      • Executes dropped EXE
      PID:5004

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        BootstrapperApplicationData.xml
        • Path C:\Windows\TEMP\{BE83BE2F-6684-49B4-A85F-5A5745E75532}\.ba\BootstrapperApplicationData.xml
        • Size 4KB
        • SHA256 289948a8d791eef30ec92c3f9ae487e26979bd02abcf913f98540e206c384b68
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        icon.ico
        • Path C:\Windows\TEMP\{BE83BE2F-6684-49B4-A85F-5A5745E75532}\.ba\icon.ico
        • Size 121KB
        • SHA256 4257925638ef858cc013d247af6de948a1a81c586e406075f0b44073296ae213
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        license.rtf
        • Path C:\Windows\TEMP\{BE83BE2F-6684-49B4-A85F-5A5745E75532}\.ba\license.rtf
        • Size 17KB
        • SHA256 a0e1b7dc7863918221444e89a1335c47c47c4fcdb11ebd66a44e19e93f2d4179
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        logo.png
        • Path C:\Windows\TEMP\{BE83BE2F-6684-49B4-A85F-5A5745E75532}\.ba\logo.png
        • Size 75KB
        • SHA256 a64a9ca5d3fa209ab731af2264ac3f17f72c5e19afa43f1d5c206a1da87302b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        thm.wxl
        • Path C:\Windows\TEMP\{BE83BE2F-6684-49B4-A85F-5A5745E75532}\.ba\thm.wxl
        • Size 5KB
        • SHA256 c59d91c5e1b5026c3b5a2da110f824f3896606b8bd984fa8b583604c49004f91
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        thm.xml
        • Path C:\Windows\TEMP\{BE83BE2F-6684-49B4-A85F-5A5745E75532}\.ba\thm.xml
        • Size 9KB
        • SHA256 e2f545f3ec7b3b624d5c1c169df1676edb6f8eb0a005c2c884c07d24c234f24b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wixstdba.exe
        • Path C:\Windows\Temp\{BE83BE2F-6684-49B4-A85F-5A5745E75532}\.ba\wixstdba.exe
        • Size 489KB
        • SHA256 e05dda0c23421cfc7a2a39b91074928605e1e69ad5f0a2a4e230ed5996fe2ff9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download