General
- Target CoolSkid.exe
- Size 17.7MB
- Sample260816-x1bblawsax
- SHA256 de3e0f0f040ed267fc859dc55d75bd84a3e55a01a11a32ae8e15ec73a929747f
- MD5 05222aae6ba259213f04646eb52aa21a
- SHA1 535c65bf4e66cc7ec809b9798f423707aa0a3b0b
- SHA512 3816fd6c12db9510e9789878e2157fa4010fd07cd8bdde6bda78371747c4a30e3e66b662b2feaa1989d8160827f9598eaa327bb4dc0e8b4ac92ec94e46ca9712
- SSDEEP 393216:HbVW88I0wuCa8SkELwqk0IEU+Rd8rFk7iYpljYg1:7VW88IQCa8ShVmcRdEk2clEg1
- TLSH T17317334C7BE901D8EAEDE23D84C2885AA3A6B91113E8C5C75AF94D600DB33D0DD757B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
CoolSkid.exe
Resource
win10ltsc2021-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target CoolSkid.exe
- Size 17.7MB
- SHA256 de3e0f0f040ed267fc859dc55d75bd84a3e55a01a11a32ae8e15ec73a929747f
- MD5 05222aae6ba259213f04646eb52aa21a
- SHA1 535c65bf4e66cc7ec809b9798f423707aa0a3b0b
- SHA512 3816fd6c12db9510e9789878e2157fa4010fd07cd8bdde6bda78371747c4a30e3e66b662b2feaa1989d8160827f9598eaa327bb4dc0e8b4ac92ec94e46ca9712
- SSDEEP 393216:HbVW88I0wuCa8SkELwqk0IEU+Rd8rFk7iYpljYg1:7VW88IQCa8ShVmcRdEk2clEg1
- TLSH T17317334C7BE901D8EAEDE23D84C2885AA3A6B91113E8C5C75AF94D600DB33D0DD757B2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.