General
- Target CoolCord.exe
- Size 21.6MB
- Sample260624-w431caey6p
- SHA256 3b088d9db3ac57dc5e2057ab06d81dfd0ec7d3dde18fba962b9da6c84d317087
- MD5 26aaff030107a61135660ceed649eaed
- SHA1 f5c2c953c1ac90cac14e68acbd33250666f94fd2
- SHA512 7343f2c96b54a5ac04770cb712157cb5885ff5a38be83049767bef95d213866712444566e87a492d5deaccf6c30197b30a053240f9e484a33148b1f9f16cc6e9
- SSDEEP 393216:PZqyCrSbiodjs14bMgLc9zGdJ0PdD0uXEAphVtpIwQSg+UPm5kqSt8PvZ7daplA:Bq5rv2G4TLcNOCp0uRphFBo+5RStsvZr
- TLSH T1FB3733592B8315F5F8EB803C4C21C661A2B275E13F90F1BF2F910A6A2D7B6C44D7E295
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
CoolCord.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
CoolCord.exe
Resource
win11ltsc2024-20260617-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target CoolCord.exe
- Size 21.6MB
- SHA256 3b088d9db3ac57dc5e2057ab06d81dfd0ec7d3dde18fba962b9da6c84d317087
- MD5 26aaff030107a61135660ceed649eaed
- SHA1 f5c2c953c1ac90cac14e68acbd33250666f94fd2
- SHA512 7343f2c96b54a5ac04770cb712157cb5885ff5a38be83049767bef95d213866712444566e87a492d5deaccf6c30197b30a053240f9e484a33148b1f9f16cc6e9
- SSDEEP 393216:PZqyCrSbiodjs14bMgLc9zGdJ0PdD0uXEAphVtpIwQSg+UPm5kqSt8PvZ7daplA:Bq5rv2G4TLcNOCp0uRphFBo+5RStsvZr
- TLSH T1FB3733592B8315F5F8EB803C4C21C661A2B275E13F90F1BF2F910A6A2D7B6C44D7E295
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.