PureCrypter

During Open-Source investigations, Just Protect observed an information-stealing malware variant masquerading as medical software uploaded to various public malware repositories in mid-late December 2024. Notably, the file used a medical-themed lure by leveraging the name medicalanalysispro.exe. Further analysis of the file indicated that the malware likely belongs to the Rhadamanthys family and likely leveraged PureCrypter…