Overview

overview

9

Static

static

3

cryptolaemus

windows10-2004-x64

9

cryptolaemus

windows11-21h2-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0e9b91cf0c46536a61178ab344f45d476346882ccd88738a93b8fcf23c7dfc70

  • Size

    1.2MB

  • Sample

    240811-mcy3mszbld

  • MD5

    9b90504b9b4391c60cd5e2616241519e

  • SHA1

    4c43f9bad36ff0b0d3a6aab523099c08e6d0ad24

  • SHA256

    0e9b91cf0c46536a61178ab344f45d476346882ccd88738a93b8fcf23c7dfc70

  • SHA512

    87163d326d51449abf1fca3d804034877f3453ad2a4b848c9d88292603b72c35b14501b50d88fa6be3574f8a3dc8f922436a324820e711efc63416b2eb1cca7d

  • SSDEEP

    24576:yRM1zOLsQLGgRdfpPpTeG5IuOxTsTfkmfnMy38GUUCku+y5gM:yMOCgRdRPR/zkmfMAUh/

Score
9/10
credential_accessdiscoverystealer

Malware Config

Targets

    • Target

      0e9b91cf0c46536a61178ab344f45d476346882ccd88738a93b8fcf23c7dfc70

    • Size

      1.2MB

    • MD5

      9b90504b9b4391c60cd5e2616241519e

    • SHA1

      4c43f9bad36ff0b0d3a6aab523099c08e6d0ad24

    • SHA256

      0e9b91cf0c46536a61178ab344f45d476346882ccd88738a93b8fcf23c7dfc70

    • SHA512

      87163d326d51449abf1fca3d804034877f3453ad2a4b848c9d88292603b72c35b14501b50d88fa6be3574f8a3dc8f922436a324820e711efc63416b2eb1cca7d

    • SSDEEP

      24576:yRM1zOLsQLGgRdfpPpTeG5IuOxTsTfkmfnMy38GUUCku+y5gM:yMOCgRdRPR/zkmfMAUh/

    Score
    9/10
    credential_accessdiscoverystealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks