45a61fc2cbeb181913e0dda0de473e352ad07227b9e1fade8174794c5dc71115 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

9

Static

static

3

cryptolaemus

windows10-2004-x64

7

cryptolaemus

windows11-21h2-x64

9

Sharing

General

Target

45a61fc2cbeb181913e0dda0de473e352ad07227b9e1fade8174794c5dc71115
Size

89KB
Sample

240906-np89tateml
MD5

0250f610d80019f656b89802a8c106c0
SHA1

e59d5a95121fbf163b2ac94abdbecff1d982368b
SHA256

45a61fc2cbeb181913e0dda0de473e352ad07227b9e1fade8174794c5dc71115
SHA512

95c3ad4e3126129461eadaa175396395d164a5ea0637c22d4e7c92406edea5c3418868bd198af04cecdb1b1dbce48ea6f48d8c93c329bd0462a0403a2be1a740
SSDEEP

1536:L7fPGykbOqjoHm4pICdfkLtAfupcWX50MxFY+yIOlnToIfUxnyaO+:Hq6+ouCpk2mpcWJ0r+QNTBfUb

Score

9^/10

credential_access discovery stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

45a61fc2cbeb181913e0dda0de473e352ad07227b9e1fade8174794c5dc71115.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

17 signatures

150 seconds

Behavioral task

behavioral2

Sample

45a61fc2cbeb181913e0dda0de473e352ad07227b9e1fade8174794c5dc71115.exe

Resource

win11-20240802-en

credential_access discovery stealer

windows11-21h2-x64

18 signatures

150 seconds

Malware Config

Targets

- Target
  
  45a61fc2cbeb181913e0dda0de473e352ad07227b9e1fade8174794c5dc71115
- Size
  
  89KB
- MD5
  
  0250f610d80019f656b89802a8c106c0
- SHA1
  
  e59d5a95121fbf163b2ac94abdbecff1d982368b
- SHA256
  
  45a61fc2cbeb181913e0dda0de473e352ad07227b9e1fade8174794c5dc71115
- SHA512
  
  95c3ad4e3126129461eadaa175396395d164a5ea0637c22d4e7c92406edea5c3418868bd198af04cecdb1b1dbce48ea6f48d8c93c329bd0462a0403a2be1a740
- SSDEEP
  
  1536:L7fPGykbOqjoHm4pICdfkLtAfupcWX50MxFY+yIOlnToIfUxnyaO+:Hq6+ouCpk2mpcWJ0r+QNTBfUb
Score

9^/10

discovery credential_access stealer
- Credentials from Password Stores: Credentials from Web Browsers
  Malicious Access or copy of Web Browser Credential store.
  credential_access stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

credential_accessdiscoverystealer

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.