Overview

overview

9

Static

static

3

cryptolaemus

windows10-2004-x64

9

cryptolaemus

windows11-21h2-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7016e51b381e388a9c40161b54de1a10cf649cd5fedd759f86c87c9df74be8f6

  • Size

    3.1MB

  • Sample

    240809-mmgw4szbll

  • MD5

    3fbf8e562fc9bd7e1aaee9cc8e0a46d6

  • SHA1

    c905f30afdccc6d7a35ff94bc3312fd6aa699a86

  • SHA256

    7016e51b381e388a9c40161b54de1a10cf649cd5fedd759f86c87c9df74be8f6

  • SHA512

    799ee93198e9da8185b01bd9afbe75385212ea58ae4672fc3c7912af6db5d808c1866960ce900647ed0b72a7ad65cb408f00ccc163253d8304de4a5946cbd743

  • SSDEEP

    98304:LHDgQwTph20Uef2xNfa7Xz7AeRspYup2:LsQwTph2xeONfSzDUYup

Score
9/10
credential_accessdiscoverystealer

Malware Config

Targets

    • Target

      7016e51b381e388a9c40161b54de1a10cf649cd5fedd759f86c87c9df74be8f6

    • Size

      3.1MB

    • MD5

      3fbf8e562fc9bd7e1aaee9cc8e0a46d6

    • SHA1

      c905f30afdccc6d7a35ff94bc3312fd6aa699a86

    • SHA256

      7016e51b381e388a9c40161b54de1a10cf649cd5fedd759f86c87c9df74be8f6

    • SHA512

      799ee93198e9da8185b01bd9afbe75385212ea58ae4672fc3c7912af6db5d808c1866960ce900647ed0b72a7ad65cb408f00ccc163253d8304de4a5946cbd743

    • SSDEEP

      98304:LHDgQwTph20Uef2xNfa7Xz7AeRspYup2:LsQwTph2xeONfSzDUYup

    Score
    9/10
    credential_accessdiscoverystealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks