c63eeb3e872b93ebce0ff49a3524133dc099017763c73dfe3779ee031f525053 | Triage

Submit
Reports

Overview

overview

3

Static

static

1

cstealer-main.zip

windows7-x64

1

cstealer-main.zip

windows10-2004-x64

1

cstealer-main/LICENSE

windows7-x64

1

cstealer-main/LICENSE

windows10-2004-x64

1

cstealer-m...DME.md

windows7-x64

3

cstealer-m...DME.md

windows10-2004-x64

3

cstealer-m...der.py

windows7-x64

3

cstealer-m...der.py

windows10-2004-x64

3

cstealer-m...s1.png

windows7-x64

3

cstealer-m...s1.png

windows10-2004-x64

3

cstealer-m...s2.png

windows7-x64

3

cstealer-m...s2.png

windows10-2004-x64

3

cstealer-m...s3.png

windows7-x64

3

cstealer-m...s3.png

windows10-2004-x64

3

cstealer-m...s4.png

windows7-x64

3

cstealer-m...s4.png

windows10-2004-x64

3

cstealer-m...ll.bat

windows7-x64

1

cstealer-m...ll.bat

windows10-2004-x64

1

cstealer-main/main.py

windows7-x64

3

cstealer-main/main.py

windows10-2004-x64

3

cstealer-m...ts.txt

windows7-x64

1

cstealer-m...ts.txt

windows10-2004-x64

1

cstealer-m...rt.bat

windows7-x64

1

cstealer-m...rt.bat

windows10-2004-x64

1

Analysis

max time kernel
233s
max time network
237s
platform
windows10-2004_x64
resource
win10v2004-20230621-en
resource tags

arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
submitted
27-06-2023 13:38

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

cstealer-main.zip

Resource

win7-20230621-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral2

Sample

cstealer-main.zip

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral3

Sample

cstealer-main/LICENSE

Resource

win7-20230621-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral4

Sample

cstealer-main/LICENSE

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral5

Sample

cstealer-main/README.md

Resource

win7-20230621-en

windows7-x64

5 signatures

300 seconds

Behavioral task

behavioral6

Sample

cstealer-main/README.md

Resource

win10v2004-20230621-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral7

Sample

cstealer-main/builder.py

Resource

win7-20230621-en

windows7-x64

4 signatures

300 seconds

Behavioral task

behavioral8

Sample

cstealer-main/builder.py

Resource

win10v2004-20230621-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral9

Sample

cstealer-main/img/ss1.png

Resource

win7-20230621-en

windows7-x64

2 signatures

300 seconds

Behavioral task

behavioral10

Sample

cstealer-main/img/ss1.png

Resource

win10v2004-20230621-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral11

Sample

cstealer-main/img/ss2.png

Resource

win7-20230621-en

windows7-x64

2 signatures

300 seconds

Behavioral task

behavioral12

Sample

cstealer-main/img/ss2.png

Resource

win10v2004-20230621-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral13

Sample

cstealer-main/img/ss3.png

Resource

win7-20230621-en

windows7-x64

2 signatures

300 seconds

Behavioral task

behavioral14

Sample

cstealer-main/img/ss3.png

Resource

win10v2004-20230621-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral15

Sample

cstealer-main/img/ss4.png

Resource

win7-20230621-en

windows7-x64

2 signatures

300 seconds

Behavioral task

behavioral16

Sample

cstealer-main/img/ss4.png

Resource

win10v2004-20230621-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral17

Sample

cstealer-main/install.bat

Resource

win7-20230621-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral18

Sample

cstealer-main/install.bat

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral19

Sample

cstealer-main/main.py

Resource

win7-20230621-en

windows7-x64

5 signatures

300 seconds

Behavioral task

behavioral20

Sample

cstealer-main/main.py

Resource

win10v2004-20230621-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral21

Sample

cstealer-main/requirements.txt

Resource

win7-20230621-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral22

Sample

cstealer-main/requirements.txt

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

300 seconds

Behavioral task

behavioral23

Sample

cstealer-main/start.bat

Resource

win7-20230621-en

windows7-x64

0 signatures

300 seconds

Behavioral task

behavioral24

Sample

cstealer-main/start.bat

Resource

win10v2004-20230621-en

windows10-2004-x64

0 signatures

300 seconds

Report Analysis Logs

General

Target

cstealer-main/img/ss4.png
Size

32KB
MD5

36fe0d1305dee57432499b9357767381
SHA1

35442726fad482b846e3428516d76a22841b9447
SHA256

9b30de17e51867a4f1797fbb84a7ba14d4207cc60a4288d91410f73614a5350b
SHA512

83fc305111204d7b78d5ca679f599c4fe54e0b0e2f053aacee5763a0ef3a15b619833ea2f98c0844fecc1be056340c905083798d6376912eacd58c939649171f
SSDEEP

768:3J3ulxPn6kjdOLSvYseci6k8k41PXEjClNledR6:wx/6kjdOLSgZclk8kWUjCf0m

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Processes

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\cstealer-main\img\ss4.png
1⤵
PID:4340

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2025

Terms | Privacy