Overview

overview

9

Static

static

3

cryptolaemus

windows10-2004-x64

9

cryptolaemus

windows11-21h2-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    0027e27dcdc31f32e1159f82034ce00169ec7e3b487999d95997c519e0e7d40a

  • Size

    1.2MB

  • Sample

    240814-hx7s3atfnr

  • MD5

    75a2d87eafbefb74dc8bab6fec16cac1

  • SHA1

    c3decd95d7e19c4dbd1d7b9e409eeb4861c6f369

  • SHA256

    0027e27dcdc31f32e1159f82034ce00169ec7e3b487999d95997c519e0e7d40a

  • SHA512

    1b6c9ad97b74f639d26fd6d3af7c218f04ef08b77f6d6a67c05350c2965941472592fc6cc9c878644e686532295a20cc23d95ca5db4b62a86ec440000079c5f4

  • SSDEEP

    24576:bIq9ZVLruR2LUUFwmWiWvuREnPRd5cZbzOqLckW+PcHkD+aO6hG1:sMnuR2LmcMuGHkbzOqLXW6hG

Score
9/10
credential_accessdiscoverystealer

Malware Config

Targets

    • Target

      0027e27dcdc31f32e1159f82034ce00169ec7e3b487999d95997c519e0e7d40a

    • Size

      1.2MB

    • MD5

      75a2d87eafbefb74dc8bab6fec16cac1

    • SHA1

      c3decd95d7e19c4dbd1d7b9e409eeb4861c6f369

    • SHA256

      0027e27dcdc31f32e1159f82034ce00169ec7e3b487999d95997c519e0e7d40a

    • SHA512

      1b6c9ad97b74f639d26fd6d3af7c218f04ef08b77f6d6a67c05350c2965941472592fc6cc9c878644e686532295a20cc23d95ca5db4b62a86ec440000079c5f4

    • SSDEEP

      24576:bIq9ZVLruR2LUUFwmWiWvuREnPRd5cZbzOqLckW+PcHkD+aO6hG1:sMnuR2LmcMuGHkbzOqLXW6hG

    Score
    9/10
    credential_accessdiscoverystealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks