Overview

overview

10

Static

static

a96342f945...e2.exe

windows7-x64

10

a96342f945...e2.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a96342f945f350742cc0ffef458f67f39cd38cecedfa07a45b5d28b814666ce2

  • Size

    206KB

  • Sample

    221108-pjq2qafgb3

  • MD5

    e1d8b7bc27e4dc0588ef982d19f302fc

  • SHA1

    990f4a93ce39cca549ba9e3a0a54db3d804e4297

  • SHA256

    a96342f945f350742cc0ffef458f67f39cd38cecedfa07a45b5d28b814666ce2

  • SHA512

    4ebb33468fbc463d50abfc38cd352169b14affd73fdffff3f4a7eca1e867dcaef0f2909451762388d32cac938b098f7cdb1e7f2ffc0930bb637eaa8b7c24c04b

  • SSDEEP

    6144:2al+UHUOqJjVwdRjdecMkuLG5HPTAULrs3EZ:JBIJjVwLVHPTrs

Score
10/10
coldstealerdiscoveryspywarestealer

Malware Config

Targets

    • Target

      a96342f945f350742cc0ffef458f67f39cd38cecedfa07a45b5d28b814666ce2

    • Size

      206KB

    • MD5

      e1d8b7bc27e4dc0588ef982d19f302fc

    • SHA1

      990f4a93ce39cca549ba9e3a0a54db3d804e4297

    • SHA256

      a96342f945f350742cc0ffef458f67f39cd38cecedfa07a45b5d28b814666ce2

    • SHA512

      4ebb33468fbc463d50abfc38cd352169b14affd73fdffff3f4a7eca1e867dcaef0f2909451762388d32cac938b098f7cdb1e7f2ffc0930bb637eaa8b7c24c04b

    • SSDEEP

      6144:2al+UHUOqJjVwdRjdecMkuLG5HPTAULrs3EZ:JBIJjVwLVHPTrs

    Score
    10/10
    coldstealerdiscoveryspywarestealer

    • Cold Stealer

      An info stealer written in C#, first seen in Feb 2022.

      stealercoldstealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

2
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks