Overview

overview

8

Static

static

3

coldperm cracked.exe

windows10-2004-x64

8

coldperm cracked.exe

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    coldperm cracked.exe
  • Size 6.7MB
  • Sample261011-mkk6ragc57
  • SHA256 2c1088154983f1800c8a1753ea7dc00ea74783f26b5de45c60f97314bb7d7903
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryexecution

Malware Config

Targets

    • Target
      coldperm cracked.exe
    • Size 6.7MB
    • SHA256 2c1088154983f1800c8a1753ea7dc00ea74783f26b5de45c60f97314bb7d7903
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasiondiscoveryexecution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Executes dropped EXE

    • Uses WMI to collect hardware manufacturer information

      Uses WMI to read the system manufacturer, model, baseboard or display adapter, which is often used to detect virtual machines and evade sandboxes.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks