General
-
Target
MyCheats AIO.exe
-
Size
7.5MB
-
Sample
230401-xrhpbadc9t
-
MD5
2bf00365ac86b3a7fae4f404f85f32e4
-
SHA1
80caa3a76c616e919dc0b1d0e25bf321cc28d5f9
-
SHA256
6e88513349b494bfd4b33abd92ada3b94c667e8b195e4a5da9a4271b09a21f10
-
SHA512
ff64a904072ffa818879468468e331a918c6949903d8318ff41f76b1c9e161dc56a746d06d44c3084ddaff8a59b82b0d3308b6d68afcefbd567a95b141ce27df
-
SSDEEP
196608:q5WxJKO0EGEQgXv1REEHG/eM8Wxj09yIkWD:dx0EgKvpItAke
Behavioral task
behavioral1
Sample
MyCheats AIO.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
MyCheats AIO.exe
-
Size
7.5MB
-
MD5
2bf00365ac86b3a7fae4f404f85f32e4
-
SHA1
80caa3a76c616e919dc0b1d0e25bf321cc28d5f9
-
SHA256
6e88513349b494bfd4b33abd92ada3b94c667e8b195e4a5da9a4271b09a21f10
-
SHA512
ff64a904072ffa818879468468e331a918c6949903d8318ff41f76b1c9e161dc56a746d06d44c3084ddaff8a59b82b0d3308b6d68afcefbd567a95b141ce27df
-
SSDEEP
196608:q5WxJKO0EGEQgXv1REEHG/eM8Wxj09yIkWD:dx0EgKvpItAke
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-