c63eeb3e872b93ebce0ff49a3524133dc099017763c73dfe3779ee031f525053 | Triage

Submit
Reports

Overview

overview

3

Static

static

1

cstealer-main.zip

windows7-x64

1

cstealer-main.zip

windows10-2004-x64

1

cstealer-main/LICENSE

windows7-x64

1

cstealer-main/LICENSE

windows10-2004-x64

1

cstealer-m...DME.md

windows7-x64

3

cstealer-m...DME.md

windows10-2004-x64

3

cstealer-m...der.py

windows7-x64

3

cstealer-m...der.py

windows10-2004-x64

3

cstealer-m...s1.png

windows7-x64

3

cstealer-m...s1.png

windows10-2004-x64

3

cstealer-m...s2.png

windows7-x64

3

cstealer-m...s2.png

windows10-2004-x64

3

cstealer-m...s3.png

windows7-x64

3

cstealer-m...s3.png

windows10-2004-x64

3

cstealer-m...s4.png

windows7-x64

3

cstealer-m...s4.png

windows10-2004-x64

3

cstealer-m...ll.bat

windows7-x64

1

cstealer-m...ll.bat

windows10-2004-x64

1

cstealer-main/main.py

windows7-x64

3

cstealer-main/main.py

windows10-2004-x64

3

cstealer-m...ts.txt

windows7-x64

1

cstealer-m...ts.txt

windows10-2004-x64

1

cstealer-m...rt.bat

windows7-x64

1

cstealer-m...rt.bat

windows10-2004-x64

1

Analysis

max time kernel
289s
max time network
293s
platform
windows10-2004_x64
resource
win10v2004-20230621-en
resource tags

arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
submitted
27-06-2023 13:38

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

cstealer-main.zip

Resource

win7-20230621-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral2

Sample

cstealer-main.zip

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral3

Sample

cstealer-main/LICENSE

Resource

win7-20230621-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral4

Sample

cstealer-main/LICENSE

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral5

Sample

cstealer-main/README.md

Resource

win7-20230621-en

windows7-x64

5 signatures

300 seconds

Behavioral task

behavioral6

Sample

cstealer-main/README.md

Resource

win10v2004-20230621-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral7

Sample

cstealer-main/builder.py

Resource

win7-20230621-en

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral8

Sample

cstealer-main/builder.py

Resource

win10v2004-20230621-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral9

Sample

cstealer-main/img/ss1.png

Resource

win7-20230621-en

windows7-x64

2 signatures

300 seconds

Behavioral task

behavioral10

Sample

cstealer-main/img/ss1.png

Resource

win10v2004-20230621-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral11

Sample

cstealer-main/img/ss2.png

Resource

win7-20230621-en

windows7-x64

2 signatures

300 seconds

Behavioral task

behavioral12

Sample

cstealer-main/img/ss2.png

Resource

win10v2004-20230621-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral13

Sample

cstealer-main/img/ss3.png

Resource

win7-20230621-en

windows7-x64

2 signatures

300 seconds

Behavioral task

behavioral14

Sample

cstealer-main/img/ss3.png

Resource

win10v2004-20230621-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral15

Sample

cstealer-main/img/ss4.png

Resource

win7-20230621-en

windows7-x64

2 signatures

300 seconds

Behavioral task

behavioral16

Sample

cstealer-main/img/ss4.png

Resource

win10v2004-20230621-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral17

Sample

cstealer-main/install.bat

Resource

win7-20230621-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral18

Sample

cstealer-main/install.bat

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral19

Sample

cstealer-main/main.py

Resource

win7-20230621-en

windows7-x64

5 signatures

300 seconds

Behavioral task

behavioral20

Sample

cstealer-main/main.py

Resource

win10v2004-20230621-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral21

Sample

cstealer-main/requirements.txt

Resource

win7-20230621-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral22

Sample

cstealer-main/requirements.txt

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral23

Sample

cstealer-main/start.bat

Resource

win7-20230621-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral24

Sample

cstealer-main/start.bat

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

300 seconds

Report Analysis Logs

General

Target

cstealer-main/img/ss1.png
Size

106KB
MD5

2b385f2df0527914a1fbc4c2125afb7e
SHA1

d2abe585325db1da10413da731f8a9f8cd9562ca
SHA256

0ce2f309f8a050e412d1293a9d06194331202e0aeac3905f0344b51c61cc028b
SHA512

63b9607e6ea5aa3d4e5c36d3ee9b9e17dcd3662e8674ff560f705ccc66203ebb6e2b42269634db9b2186b5f5f3a94131a7edca64d041667c86d274f4661b8836
SSDEEP

3072:7YaFPqgoM7Pc15S1D0y9ziI5uiGvFm8lH4UvAW:hF7fPRGYk3

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Processes

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\cstealer-main\img\ss1.png
1⤵
PID:3268

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2024

Terms | Privacy