ColdStealer[.]exe | Triage™

Resubmissions

14/06/2023, 13:00

230614-p85w6shd9v7

06/04/2023, 23:11

230406-2586msfe987

08/12/2022, 18:54

221208-xkg47sdh717

06/02/2022, 20:38

220206-zez4yabhcl10

Sharing

Copy URL Twitter E-mail

General

Target
ColdStealer.exe
Size 258KB
Sample230406-2586msfe98
SHA256 eeaf3f80e04400fa8e097fef2c84d5e32ff8c5e0cd0f46549c8651cf145ba780
MD5 c41a85123af144790520f502fe190110
SHA1 cc85d3c7c4c4d452fc12dc5a2e9ef3ffd9c0f42b
SHA512 d64e292940b62ae04426c3681fd1df092f215acafeaf61de1df38b4d64d3e703e8d516713359c98a141c153e9248c3b7d698d6aa61ad5d0a8b990095213c80a1
SSDEEP 6144:6HHRVPA+o6RLFjhDExHl0XBUnU7T/icXnNnqaV7W+czLmF:6HHRVNRLF1An+TZXNqaV7/yLI
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

ColdStealer.exe

.exe 258KB

ColdStealer.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 eeaf3f80e04400fa8e097fef2c84d5e32ff8c5e0cd0f46549c8651cf145ba780
MD5 c41a85123af144790520f502fe190110
SHA1 cc85d3c7c4c4d452fc12dc5a2e9ef3ffd9c0f42b
SHA512 d64e292940b62ae04426c3681fd1df092f215acafeaf61de1df38b4d64d3e703e8d516713359c98a141c153e9248c3b7d698d6aa61ad5d0a8b990095213c80a1
SSDEEP 6144:6HHRVPA+o6RLFjhDExHl0XBUnU7T/icXnNnqaV7W+czLmF:6HHRVNRLF1An+TZXNqaV7/yLI
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

294922

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths