Overview

overview

10

Static

static

ColdStealer.exe

windows7_x64

10

ColdStealer.exe

windows10-2004_x64

1

Resubmissions

14-06-2023 13:00

230614-p85w6shd9v 7

06-04-2023 23:11

230406-2586msfe98 7

08-12-2022 18:54

221208-xkg47sdh71 7

06-02-2022 20:38

220206-zez4yabhcl 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ColdStealer.exe

  • Size

    258KB

  • Sample

    220206-zez4yabhcl

  • MD5

    c41a85123af144790520f502fe190110

  • SHA1

    cc85d3c7c4c4d452fc12dc5a2e9ef3ffd9c0f42b

  • SHA256

    eeaf3f80e04400fa8e097fef2c84d5e32ff8c5e0cd0f46549c8651cf145ba780

  • SHA512

    d64e292940b62ae04426c3681fd1df092f215acafeaf61de1df38b4d64d3e703e8d516713359c98a141c153e9248c3b7d698d6aa61ad5d0a8b990095213c80a1

Score
10/10
shurkdiscoveryinfostealerspywarestealer

Malware Config

Targets

    • Target

      ColdStealer.exe

    • Size

      258KB

    • MD5

      c41a85123af144790520f502fe190110

    • SHA1

      cc85d3c7c4c4d452fc12dc5a2e9ef3ffd9c0f42b

    • SHA256

      eeaf3f80e04400fa8e097fef2c84d5e32ff8c5e0cd0f46549c8651cf145ba780

    • SHA512

      d64e292940b62ae04426c3681fd1df092f215acafeaf61de1df38b4d64d3e703e8d516713359c98a141c153e9248c3b7d698d6aa61ad5d0a8b990095213c80a1

    Score
    10/10
    shurkdiscoveryinfostealerspywarestealer

    • Shurk

      Shurk is an infostealer, written in C++ which appeared in 2021.

      infostealershurk

    • Shurk Stealer Payload

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks