Overview

overview

8

Static

static

1

CheatEngine75.exe

windows10-1703-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    CheatEngine75.exe

  • Size

    8.6MB

  • Sample

    231120-1fkajsba9z

  • MD5

    860e4cc52ff5a06431d108f688904b23

  • SHA1

    76d3d4812dad80254c6025728272ad113fddded3

  • SHA256

    5a5b2e52a750ce97e804909801539c65486eb40df8ad849ac2544ba620352a16

  • SHA512

    89d52eb4bd8fbf59ebf4f3e148a598330267e643dab610f4a8718eecd93a5d5385754297335aefa6344f3ae05030c1b408098f4f3a9c07815642833a406e7d50

  • SSDEEP

    196608:vxVZJZ8b2rMNUZHkof8ZBNSOHfiVdaFfPr2Oz2XmbrUAej:vnZJWb2WDofPNdaJ2OyX8UN

Score
8/10
discoveryevasionpersistence

Malware Config

Targets

    • Target

      CheatEngine75.exe

    • Size

      8.6MB

    • MD5

      860e4cc52ff5a06431d108f688904b23

    • SHA1

      76d3d4812dad80254c6025728272ad113fddded3

    • SHA256

      5a5b2e52a750ce97e804909801539c65486eb40df8ad849ac2544ba620352a16

    • SHA512

      89d52eb4bd8fbf59ebf4f3e148a598330267e643dab610f4a8718eecd93a5d5385754297335aefa6344f3ae05030c1b408098f4f3a9c07815642833a406e7d50

    • SSDEEP

      196608:vxVZJZ8b2rMNUZHkof8ZBNSOHfiVdaFfPr2Oz2XmbrUAej:vnZJWb2WDofPNdaJ2OyX8UN

    Score
    8/10
    discoveryevasionpersistence

    • Creates new service(s)

      persistence

    • Stops running service(s)

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Checks for any installed AV software in registry

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks