Overview

overview

10

Static

static

10

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ae221670729038f92398b7fe4e08928ea6ebc0c1d006c63c8a3bac2e30770c2b

  • Size

    94KB

  • Sample

    240319-xp7knacc97

  • MD5

    93fd11cf69ac4f2b596f4e51a561b7b0

  • SHA1

    077e1d02b17f023a13e64b43d9b19764705e3e8d

  • SHA256

    ae221670729038f92398b7fe4e08928ea6ebc0c1d006c63c8a3bac2e30770c2b

  • SHA512

    4d870ba8af1617982c5f0e9cbd2da6fa5b0f109b8cd9ef2e6f7fcefacd4e44a13a018e2d1733798e59d2bbe62d337c121eef3408efb315252eed729dd1cb6372

  • SSDEEP

    1536:QNDrcwsIe38pzMX4Zm3QVd4lrYKIgInPv2Pvl/XNas2fRBW5nrJrc:QNDrpArCcQVd46bnPvuozrW5nrJo

Score
10/10
lobshotbackdoorpersistencespywarestealer

Malware Config

Targets

    • Target

      ae221670729038f92398b7fe4e08928ea6ebc0c1d006c63c8a3bac2e30770c2b

    • Size

      94KB

    • MD5

      93fd11cf69ac4f2b596f4e51a561b7b0

    • SHA1

      077e1d02b17f023a13e64b43d9b19764705e3e8d

    • SHA256

      ae221670729038f92398b7fe4e08928ea6ebc0c1d006c63c8a3bac2e30770c2b

    • SHA512

      4d870ba8af1617982c5f0e9cbd2da6fa5b0f109b8cd9ef2e6f7fcefacd4e44a13a018e2d1733798e59d2bbe62d337c121eef3408efb315252eed729dd1cb6372

    • SSDEEP

      1536:QNDrcwsIe38pzMX4Zm3QVd4lrYKIgInPv2Pvl/XNas2fRBW5nrJrc:QNDrpArCcQVd46bnPvuozrW5nrJo

    Score
    10/10
    lobshotbackdoorpersistencespywarestealer

    • Detects Lobshot family

    • Lobshot

      Lobshot is a backdoor module written in c++.

      backdoorlobshot

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks