Overview

overview

9

Static

static

3

cryptolaemus

windows10-2004-x64

7

cryptolaemus

windows11-21h2-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    72c1a1787bf3fe7a794664135e1ee8af03f162d1a970444ab02ddd8b717f15f9

  • Size

    89KB

  • Sample

    240823-fsaawsyglk

  • MD5

    08ba35f38182ce9533b8a49ac8e79c0d

  • SHA1

    84a72c41a3b3277fab7c8fd5e1ab94ae2bc57921

  • SHA256

    72c1a1787bf3fe7a794664135e1ee8af03f162d1a970444ab02ddd8b717f15f9

  • SHA512

    f8e0f94c5d1fe0674521fd71827a21aac156f34a5546be82ba9fabf2352ef7118e47bcc19ed960a390324a6ddb895c9b0d4300a519f534fd1bcf86d6e63144d7

  • SSDEEP

    1536:L7fPGykbOqjoHm4pICdfkLtAfupcWX50MxFY+yIOlnToIf0xZzEO+:Hq6+ouCpk2mpcWJ0r+QNTBf0H6

Score
9/10
credential_accessdiscoverystealer

Malware Config

Targets

    • Target

      72c1a1787bf3fe7a794664135e1ee8af03f162d1a970444ab02ddd8b717f15f9

    • Size

      89KB

    • MD5

      08ba35f38182ce9533b8a49ac8e79c0d

    • SHA1

      84a72c41a3b3277fab7c8fd5e1ab94ae2bc57921

    • SHA256

      72c1a1787bf3fe7a794664135e1ee8af03f162d1a970444ab02ddd8b717f15f9

    • SHA512

      f8e0f94c5d1fe0674521fd71827a21aac156f34a5546be82ba9fabf2352ef7118e47bcc19ed960a390324a6ddb895c9b0d4300a519f534fd1bcf86d6e63144d7

    • SSDEEP

      1536:L7fPGykbOqjoHm4pICdfkLtAfupcWX50MxFY+yIOlnToIf0xZzEO+:Hq6+ouCpk2mpcWJ0r+QNTBf0H6

    Score
    9/10
    discoverycredential_accessstealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks