General
- Target CookieSentinel.exe
- Size 72.9MB
- Sample260724-hdf61attct
- SHA256 9731dc649d50814412a73389350fbe73747ab211c9dfadc4700bf4d59db646ec
- MD5 20f30dd4f7ad296ce33243c653cc0424
- SHA1 046b90f7ebdd88292d39cacb485ac7b120baf439
- SHA512 a26d05b18a522bb516d40ced44a48dd70baf26224d7afe76722f88d2cc5e9c65c0ba9be714a4efe0f51b07d20d136e321fff3de5d47af5d7926e7e84897ae860
- SSDEEP 1572864:d/Y018UfKuCAuchEkI6RPGMXTrXbvPNTL3cpzXT1:p6UKHcqkXPBrL9H3izX
- TLSH T1AAF73331E8B339D0CB3552F60A4E591BBE381F531B9261C16F9B75B9B93B4B04638A07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CookieSentinel.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
CookieSentinel.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target CookieSentinel.exe
- Size 72.9MB
- SHA256 9731dc649d50814412a73389350fbe73747ab211c9dfadc4700bf4d59db646ec
- MD5 20f30dd4f7ad296ce33243c653cc0424
- SHA1 046b90f7ebdd88292d39cacb485ac7b120baf439
- SHA512 a26d05b18a522bb516d40ced44a48dd70baf26224d7afe76722f88d2cc5e9c65c0ba9be714a4efe0f51b07d20d136e321fff3de5d47af5d7926e7e84897ae860
- SSDEEP 1572864:d/Y018UfKuCAuchEkI6RPGMXTrXbvPNTL3cpzXT1:p6UKHcqkXPBrL9H3izX
- TLSH T1AAF73331E8B339D0CB3552F60A4E591BBE381F531B9261C16F9B75B9B93B4B04638A07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Enumerates processes with tasklist