PureCrypter
Software · ATTACK:enterprise:S9019
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:S9019",
"title": "PureCrypter",
"type": "Software",
"source_url": "https://attack.mitre.org/software/S9019",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "malware--6f22487c-dbbf-4a5b-85ca-a8c85e8f2f80",
"external_id": "S9019",
"domain": "enterprise",
"created": "2026-04-16T22:06:18.120Z",
"modified": "2026-04-23T03:35:11.899Z",
"version": "1.0",
"aliases": [
],
"tactics": [
],
"source_references": [
{
"source_name": "Zscaler PureCrypter JUN 2022",
"url": "https://www.zscaler.com/blogs/security-research/technical-analysis-purecrypter"
}
]
}Explicit source assertions (27)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1057
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0e60931e-34df-4a29-936f-32064ec007c1
Check Point Blind Eagle MAR 2025ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0e770d53-2dea-4d8d-8bbf-a2290d4a78a7
Check Point Blind Eagle MAR 2025 · Zscaler PureCrypter JUN 2022ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1480.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1633e6bb-fe82-48a5-8c0b-26d0a06b357a
Zscaler PureCrypter JUN 2022ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1673
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1bfece9c-8ba6-499d-a25e-fab239e63f0d
Zscaler PureCrypter JUN 2022ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1102
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2065dfc0-837a-4ff0-a929-420d9fa8b2a1
Zscaler PureCrypter JUN 2022ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1685
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3c1b9608-a67a-4db6-adbc-ea24cca581ba
Zscaler PureCrypter JUN 2022ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1033
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--50189f72-7432-4af7-a600-50a95c8c641f
Check Point Blind Eagle MAR 2025ATTACK:enterprise:G0099 → uses → ATTACK:enterprise:S9019
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5ba60c32-24f6-49d2-b4ae-06ca26adfbaa
Check Point Blind Eagle MAR 2025ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1036.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--62f8a6c8-fb99-4fbf-b7ec-46278a6133b9
Zscaler PureCrypter JUN 2022ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1140
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--68166b59-ac4b-4bdc-928d-01e945611a5e
Check Point Blind Eagle MAR 2025 · Zscaler PureCrypter JUN 2022ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1614
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--69b96d7c-4606-4dfe-99e6-c64a4a51a0cc
Zscaler PureCrypter JUN 2022ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1518.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6d651de6-29d6-4621-91af-a48593ab7c19
Check Point Blind Eagle MAR 2025ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1622
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7073777a-12f6-4afa-aa0d-8be1b29cf63b
Zscaler PureCrypter JUN 2022ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1053.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--70f7caf8-eb30-4ab9-b054-c18edd33b8e9
Check Point Blind Eagle MAR 2025ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1573.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--73e1f789-978f-4ab7-be88-137d89423215
Zscaler PureCrypter JUN 2022ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1547.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--742ac520-ebc2-4ac2-8083-2c2d601fda4f
Zscaler PureCrypter JUN 2022ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1480
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8801b2f6-2f8d-4e75-aecf-6432695c969f
Zscaler PureCrypter JUN 2022ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--aa736843-16e9-4872-827a-41d24782cdb7
Check Point Blind Eagle MAR 2025 · Zscaler PureCrypter JUN 2022ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1059.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b0913099-1f00-44d5-b3d6-13ee2c07553d
Check Point Blind Eagle MAR 2025 · Zscaler PureCrypter JUN 2022ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1573.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bc054b77-6622-4742-8acc-e2e31e63426c
Check Point Blind Eagle MAR 2025ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1036.008
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cb11ef49-78df-43e9-b2f2-a2914aa00c3f
Zscaler PureCrypter JUN 2022ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1055
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d802c27b-b5b1-4bd6-8c23-858ab395afaf
Zscaler PureCrypter JUN 2022ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1564.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--db065297-130b-4aba-b083-b301a1cc6ca6
Check Point Blind Eagle MAR 2025ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1070.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f3e483a0-a32e-4da8-a6b4-643e40ce3bde
Zscaler PureCrypter JUN 2022ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1678
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f5039faf-3fa9-4d37-8dae-db7a081ecf56
Zscaler PureCrypter JUN 2022ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1027.016
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fa760bd6-1a7f-47ed-95b2-195cd3ab7bf8
Zscaler PureCrypter JUN 2022ATTACK:enterprise:S9019 → uses → ATTACK:enterprise:T1027.013
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fa83b0ea-65b1-44da-9229-542efc06a3ae
Check Point Blind Eagle MAR 2025 · Zscaler PureCrypter JUN 2022