Overview

overview

7

Static

static

3

CS_CHEATS.exe

windows7-x64

7

CS_CHEATS.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    CS_CHEATS.exe

  • Size

    16.1MB

  • Sample

    240406-bhkxesgf88

  • MD5

    c72de59582bc1e4a491523b6b88cc65d

  • SHA1

    2ceb6516bf10b85ce703d24fcac1aa9230c3d45d

  • SHA256

    4a5dce090ffc721766909f3e7afa1a6e8c16d213a06ef8c3080284f77ed4aa62

  • SHA512

    a6cd7bea98852776d432b1b94b04847fa06b76967d51e296ed733bc3e80c52ac383fd3e1fd817ac1f5709f2a0893adffa8a3da59363832869af82172d433ea19

  • SSDEEP

    393216:wEkZgf8URP8AxYDX1+TtIiFGuvB5IjWqn6eCzPsyxXUS+d:wRbUaX71QtIZS3ILn6enyV+d

Score
7/10
pyinstallerspywarestealer

Malware Config

Targets

    • Target

      CS_CHEATS.exe

    • Size

      16.1MB

    • MD5

      c72de59582bc1e4a491523b6b88cc65d

    • SHA1

      2ceb6516bf10b85ce703d24fcac1aa9230c3d45d

    • SHA256

      4a5dce090ffc721766909f3e7afa1a6e8c16d213a06ef8c3080284f77ed4aa62

    • SHA512

      a6cd7bea98852776d432b1b94b04847fa06b76967d51e296ed733bc3e80c52ac383fd3e1fd817ac1f5709f2a0893adffa8a3da59363832869af82172d433ea19

    • SSDEEP

      393216:wEkZgf8URP8AxYDX1+TtIiFGuvB5IjWqn6eCzPsyxXUS+d:wRbUaX71QtIZS3ILn6enyV+d

    Score
    7/10
    spywarestealer

    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks