Overview

overview

7

Static

static

3

cryptolaemus

windows10-2004-x64

7

cryptolaemus

windows11-21h2-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8e237e1819a862b869b00c7976f87bf35b5e8cf3a124a4e2940d5baf29e4bf5e

  • Size

    3.1MB

  • Sample

    240727-mqkr6svepk

  • MD5

    581075f5480dcc0b526c7d2657dbdbfe

  • SHA1

    7b1b9b9e4eb77420284a2e4dca25e868ace1d563

  • SHA256

    8e237e1819a862b869b00c7976f87bf35b5e8cf3a124a4e2940d5baf29e4bf5e

  • SHA512

    c46dca2aaa534bec81e9ae7bee5a5c969da10608d7d973e128874c6228a9ca6ddb0e1ac1b4b6c326b688ed8bf701925fa02ad2f91d8dd8dfbcc08ec575be1665

  • SSDEEP

    98304:rVIqrj5r24Ig10gD0IknxR4eaMBXgLdkOlmx:rVIO5i4IUwIknxR45kSfmx

Score
7/10
discovery

Malware Config

Targets

    • Target

      8e237e1819a862b869b00c7976f87bf35b5e8cf3a124a4e2940d5baf29e4bf5e

    • Size

      3.1MB

    • MD5

      581075f5480dcc0b526c7d2657dbdbfe

    • SHA1

      7b1b9b9e4eb77420284a2e4dca25e868ace1d563

    • SHA256

      8e237e1819a862b869b00c7976f87bf35b5e8cf3a124a4e2940d5baf29e4bf5e

    • SHA512

      c46dca2aaa534bec81e9ae7bee5a5c969da10608d7d973e128874c6228a9ca6ddb0e1ac1b4b6c326b688ed8bf701925fa02ad2f91d8dd8dfbcc08ec575be1665

    • SSDEEP

      98304:rVIqrj5r24Ig10gD0IknxR4eaMBXgLdkOlmx:rVIO5i4IUwIknxR45kSfmx

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks