General
-
Target
8a4a1fe09544dacd804d0c2bb183850d628274a7e0dc9ea2bb6860d7a75bf61b.bin
-
Size
505KB
-
Sample
220705-pxvxtsbbe9
-
MD5
a48f8e50e74b3792eeaffc6d25ca0080
-
SHA1
37b5e5a237164f304e960a82a3e8ce561d71c02d
-
SHA256
8a4a1fe09544dacd804d0c2bb183850d628274a7e0dc9ea2bb6860d7a75bf61b
-
SHA512
e43010c9a0c35e7bdecd2bcdb40ad115697e09bf6922dc2c4a2421e30313fa5aded5babc72a6cbac874c304f629d511adcfa4053b2b88142272678f6d03d4030
Static task
static1
Behavioral task
behavioral1
Sample
8a4a1fe09544dacd804d0c2bb183850d628274a7e0dc9ea2bb6860d7a75bf61b.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
8a4a1fe09544dacd804d0c2bb183850d628274a7e0dc9ea2bb6860d7a75bf61b.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
coldstealer
l2
http://realacademicmediausa.com/
Targets
-
-
Target
8a4a1fe09544dacd804d0c2bb183850d628274a7e0dc9ea2bb6860d7a75bf61b.bin
-
Size
505KB
-
MD5
a48f8e50e74b3792eeaffc6d25ca0080
-
SHA1
37b5e5a237164f304e960a82a3e8ce561d71c02d
-
SHA256
8a4a1fe09544dacd804d0c2bb183850d628274a7e0dc9ea2bb6860d7a75bf61b
-
SHA512
e43010c9a0c35e7bdecd2bcdb40ad115697e09bf6922dc2c4a2421e30313fa5aded5babc72a6cbac874c304f629d511adcfa4053b2b88142272678f6d03d4030
Score10/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-