Overview

overview

7

Static

static

7

cryptolaemus

windows10-2004-x64

7

cryptolaemus

windows11-21h2-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ea09c8a1abd277ef0ca2a44661a7c4f1a8b9e37b99ee2f5360c79a98e75f4637

  • Size

    266KB

  • Sample

    240908-pfymdsxgng

  • MD5

    96f76be6826b4c601de10c8818c52ff2

  • SHA1

    c0bf7d78ca76919bc55e034289c18e3d5f2d372b

  • SHA256

    ea09c8a1abd277ef0ca2a44661a7c4f1a8b9e37b99ee2f5360c79a98e75f4637

  • SHA512

    6ce2efcfa005e5bd59183cf73bc91d6916faf885f7286af046f7e5fdc9f21716224c8c8f4797ed80c81b699625bda89643572b8342f55a60e0487c03327eba46

  • SSDEEP

    3072:ENXEGZJWhfNFC4S60+XoLczrVmXosGe/YM5HjS+/fbC8DcGsnsaeb0Bje4XG:SXzKdNY49u8rVqHXjLHu8DcGrD0BjeB

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      ea09c8a1abd277ef0ca2a44661a7c4f1a8b9e37b99ee2f5360c79a98e75f4637

    • Size

      266KB

    • MD5

      96f76be6826b4c601de10c8818c52ff2

    • SHA1

      c0bf7d78ca76919bc55e034289c18e3d5f2d372b

    • SHA256

      ea09c8a1abd277ef0ca2a44661a7c4f1a8b9e37b99ee2f5360c79a98e75f4637

    • SHA512

      6ce2efcfa005e5bd59183cf73bc91d6916faf885f7286af046f7e5fdc9f21716224c8c8f4797ed80c81b699625bda89643572b8342f55a60e0487c03327eba46

    • SSDEEP

      3072:ENXEGZJWhfNFC4S60+XoLczrVmXosGe/YM5HjS+/fbC8DcGsnsaeb0Bje4XG:SXzKdNY49u8rVqHXjLHu8DcGrD0BjeB

    Score
    7/10
    discoveryupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks