General

  • Target

    Cheat_Center.rar

  • Size

    5.9MB

  • Sample

    240227-1hbfescb86

  • MD5

    6517446085cee12d9293100fb5343963

  • SHA1

    164502743d27ccc0597825bf3cc79f667719b10c

  • SHA256

    7d02b2769cc7beaca871d1326cb7cc207f18b9b0d64283dca90ec1f5a6fc227d

  • SHA512

    b88b3d628b8af3d7b4720310e3ba672d9ff18b52b830015872b69c10d9eccd934a3d7855b48b13c237ef71c310ff1838328df372e5503d56298bcd3726d51679

  • SSDEEP

    98304:KWTY3B6oZ/o9c1hApvN0Cs4IH9CjFysd8sTBUVjJafF8zZdFdxOpkI2A6:KSoZ/1KV0GU9Chyg8saVjJ4F81dFdNs6

Score
10/10

Malware Config

Targets

    • Target

      Cheat_Center.rar

    • Size

      5.9MB

    • MD5

      6517446085cee12d9293100fb5343963

    • SHA1

      164502743d27ccc0597825bf3cc79f667719b10c

    • SHA256

      7d02b2769cc7beaca871d1326cb7cc207f18b9b0d64283dca90ec1f5a6fc227d

    • SHA512

      b88b3d628b8af3d7b4720310e3ba672d9ff18b52b830015872b69c10d9eccd934a3d7855b48b13c237ef71c310ff1838328df372e5503d56298bcd3726d51679

    • SSDEEP

      98304:KWTY3B6oZ/o9c1hApvN0Cs4IH9CjFysd8sTBUVjJafF8zZdFdxOpkI2A6:KSoZ/1KV0GU9Chyg8saVjJ4F81dFdNs6

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      Cheat Center.exe

    • Size

      6.0MB

    • MD5

      8845c14bb9ba6a8a3b16dc451f7f68e0

    • SHA1

      47e470754dc68915096af110f65ad480ebe0c222

    • SHA256

      3bf3c328bdbd8f2582f92f9313b9744ba92c187ccc6701c18002f7287cfda949

    • SHA512

      c2820a60cbc0bd0b6e48cd6952d45ec219bf41307c292d10379ec0d2dd3cb8f2af8450c6af2299251288ac55381f55846eb47187a1c25ac91c64c9f96cb7c5f0

    • SSDEEP

      98304:XS+EtdFByanamaHl3Ne4i3gmtfXJOLhx9fZAzDJ4wzQgsRuGK4RjBMRCd3OJxT3:XSdFMaKeN/FJMIDJf0gsAGK4RjuRBT

    Score
    7/10
    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      �&�0�E.pyc

    • Size

      857B

    • MD5

      2de388575880b3e0752352c6b253723a

    • SHA1

      18328aed3c4288fd6e68865acc0996a43bb19fca

    • SHA256

      359697acf4ad975e9ffd35482a474a4c447c9216346c74bbeff4b8d13ac76fa7

    • SHA512

      b16907d88984b520aa930196b1cd624ed7dc97289c51870a0b7c4f86beddfe7245f87e210288fdb52c0d1b752638b1f189e1ff1bdcc26027c7699d9e1e34d822

    Score
    1/10
    • Target

      imgui.ini

    • Size

      127B

    • MD5

      db8283cf888ae6d7be93e85579b5105b

    • SHA1

      1fab86eb60789f88a3b32afb3d0c62074227f089

    • SHA256

      1c7ae86d347c9241b58b66e136e00e675dbc68553d0caf557ff77994c70616e4

    • SHA512

      e49be9291eec24104af14577cd6eaab10c89302fd958b5532a23162aebcf9dbcb4a85336be0531b89e25797546a79dd734180824010aabe210b4e157a2166b04

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks