General
- Target ColdStealer.exe
- Size 258KB
- Sample230406-2586msfe98
- SHA256 eeaf3f80e04400fa8e097fef2c84d5e32ff8c5e0cd0f46549c8651cf145ba780
- MD5 c41a85123af144790520f502fe190110
- SHA1 cc85d3c7c4c4d452fc12dc5a2e9ef3ffd9c0f42b
- SHA512 d64e292940b62ae04426c3681fd1df092f215acafeaf61de1df38b4d64d3e703e8d516713359c98a141c153e9248c3b7d698d6aa61ad5d0a8b990095213c80a1
- SSDEEP 6144:6HHRVPA+o6RLFjhDExHl0XBUnU7T/icXnNnqaV7W+czLmF:6HHRVNRLF1An+TZXNqaV7/yLI
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
ColdStealer.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target ColdStealer.exe
- Size 258KB
- SHA256 eeaf3f80e04400fa8e097fef2c84d5e32ff8c5e0cd0f46549c8651cf145ba780
- MD5 c41a85123af144790520f502fe190110
- SHA1 cc85d3c7c4c4d452fc12dc5a2e9ef3ffd9c0f42b
- SHA512 d64e292940b62ae04426c3681fd1df092f215acafeaf61de1df38b4d64d3e703e8d516713359c98a141c153e9248c3b7d698d6aa61ad5d0a8b990095213c80a1
- SSDEEP 6144:6HHRVPA+o6RLFjhDExHl0XBUnU7T/icXnNnqaV7W+czLmF:6HHRVNRLF1An+TZXNqaV7/yLI
- MD5 SHA1 SHA512 SSDEEP
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.