Overview

overview

10

Static

static

10

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Analysis

  • max time kernel
    108s
  • max time network
    127s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    09-08-2024 13:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    9b09585f7216e49678cf6a947154153a95be25fe5ab88ce83deb18da89df8a60.exe

  • Size

    2.0MB

  • MD5

    30b919cba41f8b06624cb9fc5eb4a88e

  • SHA1

    469612e77f992753c0b55db7d426d3010ed99136

  • SHA256

    9b09585f7216e49678cf6a947154153a95be25fe5ab88ce83deb18da89df8a60

  • SHA512

    9fe568498903bd9998591d25c87029710ad674bb5efb314485e2018f2bfb2e4c8dee4b693cc2510977134e8bfb50516f4fb0dd31a427ec5053a6988ff70ef9bf

  • SSDEEP

    49152:x4IRtk3Py52UmGrNqbe+nHj0pHiEPKEk7mUW:Ltk3q2fO0rQH4d

Score
10/10
mimikatz

Malware Config

Signatures

  • Mimikatz

    mimikatz is an open source tool to dump credentials on Windows.

    mimikatz
  • mimikatz is an open source tool to dump credentials on Windows 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\9b09585f7216e49678cf6a947154153a95be25fe5ab88ce83deb18da89df8a60.exe
    "C:\Users\Admin\AppData\Local\Temp\9b09585f7216e49678cf6a947154153a95be25fe5ab88ce83deb18da89df8a60.exe"
    1⤵
      PID:2012

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2012-0-0x00007FFF4B0D3000-0x00007FFF4B0D5000-memory.dmp

      Filesize

      8KB

      Download

    • memory/2012-1-0x0000000000770000-0x000000000097A000-memory.dmp

      Filesize

      2.0MB

      Download

    • memory/2012-3-0x00007FFF4B0D0000-0x00007FFF4BB92000-memory.dmp

      Filesize

      10.8MB

      Download

    • memory/2012-5-0x00007FFF4B0D0000-0x00007FFF4BB92000-memory.dmp

      Filesize

      10.8MB

      Download