Analysis
-
max time kernel
129s -
max time network
139s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
18-06-2024 17:27
General
-
Target
7a85ba084aff19a5ec83585bfd53a03f3d3214c1978f8058e4d6dc57f5b1546e.exe
-
Size
332KB
-
MD5
1e000d97122cd44f3805592902e505ae
-
SHA1
94003b97739d0d4f2776361f82dc3e9a3f744ee6
-
SHA256
7a85ba084aff19a5ec83585bfd53a03f3d3214c1978f8058e4d6dc57f5b1546e
-
SHA512
484acfd728b8609b8c1a64c1772f5530d5cca99b3f4f8b1365a36d096b8ebac9977b2577656ff64489435ec6635491a796c26a281a4ca6f9bf92d420fc25f7ad
-
SSDEEP
6144:s1LUaHsGL8UYss61pZnFUw0s32WzNprLespyzUsMf0f:sKafGezNprrf0f
Score
10/10
Malware Config
Signatures
-
PureLog Stealer
PureLog Stealer is an infostealer written in C#.
-
PureLog Stealer payload 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7a85ba084aff19a5ec83585bfd53a03f3d3214c1978f8058e4d6dc57f5b1546e.exe"C:\Users\Admin\AppData\Local\Temp\7a85ba084aff19a5ec83585bfd53a03f3d3214c1978f8058e4d6dc57f5b1546e.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1284-0-0x00000000746BE000-0x00000000746BF000-memory.dmpFilesize
4KB
-
memory/1284-1-0x0000000000C60000-0x0000000000CBA000-memory.dmpFilesize
360KB
-
memory/1284-2-0x0000000000390000-0x000000000039A000-memory.dmpFilesize
40KB
-
memory/1284-3-0x00000000746B0000-0x0000000074D9E000-memory.dmpFilesize
6.9MB
-
memory/1284-4-0x00000000746B0000-0x0000000074D9E000-memory.dmpFilesize
6.9MB