General
-
Target
AmongUs-Cheat.exe
-
Size
16.1MB
-
Sample
240501-vjj63abf9w
-
MD5
a40bc37eff26c03a52f137813410b276
-
SHA1
f0736be3bd4151705becbb75a2dfbdeb39eb64f3
-
SHA256
2c94796c6ad4d1ed123194d787fa91f728d28a9ac5f455e59219ee097d49fdfa
-
SHA512
d18a8407f47f7b7decfe46fe50b70844ea470976b1c92b8a134aae3764f9ec18931ffb7dbf9de7b5a1bdeff3bfac697336e23b366b19ff7807dd02b036d58234
-
SSDEEP
393216:Ev90+5gDkTh2Jp5MwurEUWjsrz7E5PKk9buK+x:i9PvThidb8z7bkEK+
Behavioral task
behavioral1
Sample
AmongUs-Cheat.exe
Resource
win7-20231129-de
Behavioral task
behavioral2
Sample
AmongUs-Cheat.exe
Resource
win10v2004-20240419-de
Behavioral task
behavioral3
Sample
AmongUs-Cheat.pyc
Resource
win7-20240419-de
Behavioral task
behavioral4
Sample
AmongUs-Cheat.pyc
Resource
win10v2004-20240419-de
Malware Config
Targets
-
-
Target
AmongUs-Cheat.exe
-
Size
16.1MB
-
MD5
a40bc37eff26c03a52f137813410b276
-
SHA1
f0736be3bd4151705becbb75a2dfbdeb39eb64f3
-
SHA256
2c94796c6ad4d1ed123194d787fa91f728d28a9ac5f455e59219ee097d49fdfa
-
SHA512
d18a8407f47f7b7decfe46fe50b70844ea470976b1c92b8a134aae3764f9ec18931ffb7dbf9de7b5a1bdeff3bfac697336e23b366b19ff7807dd02b036d58234
-
SSDEEP
393216:Ev90+5gDkTh2Jp5MwurEUWjsrz7E5PKk9buK+x:i9PvThidb8z7bkEK+
-
Drops startup file
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
-
-
Target
AmongUs-Cheat.pyc
-
Size
69KB
-
MD5
fb942aafb09f2c768e27fba5460ffcda
-
SHA1
0f5ab31a93a66f7c9160e76fa2126027f89ed987
-
SHA256
114f92f159dd6defdda66707812cb320102c7357595179f61507ef5d79f133d7
-
SHA512
7c7b5d20b520ab6241ec2934547349947586abd5cc14ebf27e7cf4345856c4936aba246c26379c13ac9cc0f57a46320e3471bb7033fd2f8e608886019b30ca75
-
SSDEEP
768:ufAIw3n7BMMM8v82TwIvmLRmbp3oXTx2VatZA7iUIgxyniAnjOynrX6D7Ln:uI3nlM9mFwxyIgxynvaMrM
Score3/10 -