General

  • Target

    ZeTrixCheat.rar

  • Size

    19.0MB

  • Sample

    221006-r19lhahhgm

  • MD5

    f1803f592f04f22a9883ea6f0e6637fc

  • SHA1

    206e83ae0081337b052a4fb6406cc25d167c7136

  • SHA256

    1800bb7acec82d886f46deb4e68de2f7d6e04a91636f6aa4f8fc657156926648

  • SHA512

    89ffe8f3d2a84caff6795332dc90adba08b54cd86424b127716ced6eb239d83c8e628f51b661ec2c18520ef7b44e592e3d38068a95fab2618ea7dba9a2fe8c3f

  • SSDEEP

    393216:IGFerVJZ4OaJIQG/SxP0ytYnuRBnktayWfgbhfyZjvBjNoP0KSE893SmOH5:IGFYJiOaoaP0y6uRBnktaNgbhfuvBjyN

Malware Config

Targets

    • Target

      ZetrixCheat/ZetrixCheat.exe

    • Size

      19.0MB

    • MD5

      9082c76be7bdbf9f381f53c88adc3629

    • SHA1

      3f61d012507fefef3d2352a7152b1edd489f4c8c

    • SHA256

      a1cc516212b1c38a2e9260d561073ee1be44de1711ced41c72fff5cfcd203716

    • SHA512

      c874fb99cc9e045cdd12540351e8408781f7fc52caa23ea214268d7388304e4fbb70c5e8ff2c68d1441fecfc267eb3d2fd4483f564ca54fc687884bbf0576ca0

    • SSDEEP

      393216:TGFerVJZ4OaJIQG/SxP0ytYnuRBnktayWfgbhfyZjvBjNoP0KSE893SmOH:TGFYJiOaoaP0y6uRBnktaNgbhfuvBjyM

    • Detect PureCrypter loader

    • PureCrypter

      PureCrypter is a loader which is intended for downloading and executing additional payloads.

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks