Pure Coder Sells Malware On Dark Web Forums

## Executive Summary: The report documents a December 2022 spam campaign targeting Italian users that delivered a password-protected ZIP containing a disguised cabinet/batch file which dropped a PureLogs .NET information stealer (x.exe) and an in-memory DLL payload (Ixqwqtt.dll). It provides technical analysis of the infection chain (download, decryption, Assembly.Load-based injection), full IoCs (filenames and hashes), mappings to MITRE ATT&CK techniques, descriptions of related PureCoder tools (PureCrypter, PureMiner, BlueLoader, PureHVNC), and recommended defensive measures.