Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d9ad04c340ef269d3979ebcb6904d306622eb3ac712e10231d9934a59191dabd

  • Size

    12KB

  • Sample

    240522-zqn6tagd56

  • MD5

    7c458ca0f0852793b1ff284afaed8217

  • SHA1

    764ff825b6627efe6c3453bcbae2c7cc1acab157

  • SHA256

    d9ad04c340ef269d3979ebcb6904d306622eb3ac712e10231d9934a59191dabd

  • SHA512

    13c3bb862edd05f356088fce17fcedc8da5c0db5d5f23a67967c52645372f21cdbea7c3785da7dd0d6e8db4baa616031b0ddd7840cdeae1632574015d1ec12c3

  • SSDEEP

    192:aKL29RBzDzeobchBj8JONmON/nru2rEPEjr7AhN:529jnbcvYJObxu2vr7CN

Score
10/10
execution

Malware Config

Targets

    • Target

      d9ad04c340ef269d3979ebcb6904d306622eb3ac712e10231d9934a59191dabd

    • Size

      12KB

    • MD5

      7c458ca0f0852793b1ff284afaed8217

    • SHA1

      764ff825b6627efe6c3453bcbae2c7cc1acab157

    • SHA256

      d9ad04c340ef269d3979ebcb6904d306622eb3ac712e10231d9934a59191dabd

    • SHA512

      13c3bb862edd05f356088fce17fcedc8da5c0db5d5f23a67967c52645372f21cdbea7c3785da7dd0d6e8db4baa616031b0ddd7840cdeae1632574015d1ec12c3

    • SSDEEP

      192:aKL29RBzDzeobchBj8JONmON/nru2rEPEjr7AhN:529jnbcvYJObxu2vr7CN

    Score
    10/10
    execution

    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks