General

  • Target

    CheatEngine75.exe

  • Size

    28.5MB

  • Sample

    240530-sw1ngaeb66

  • MD5

    7b90729e351a4fe8a8883ed5a1a6c22a

  • SHA1

    94f16f13e67eaef7761addcf6954deae6891768e

  • SHA256

    f787e741177478cf01fa1d58e2451ccbf83afd1ce990df0b4682d0f0605ed822

  • SHA512

    27e2a76e3398a500a9c0576c381707cd9b1ade30102a14e90a0fed63478dd229404fb2a30050fac80fc71e5704b6b30aada65dcc5c972b4b1ca7c2581e59b533

  • SSDEEP

    786432:VTCxuEnwFho+zM77UDZiZCd08jFZJAI5E70TZFH21:V2EXFhV0KAcNjxAItjC

Malware Config

Targets

    • Target

      CheatEngine75.exe

    • Size

      28.5MB

    • MD5

      7b90729e351a4fe8a8883ed5a1a6c22a

    • SHA1

      94f16f13e67eaef7761addcf6954deae6891768e

    • SHA256

      f787e741177478cf01fa1d58e2451ccbf83afd1ce990df0b4682d0f0605ed822

    • SHA512

      27e2a76e3398a500a9c0576c381707cd9b1ade30102a14e90a0fed63478dd229404fb2a30050fac80fc71e5704b6b30aada65dcc5c972b4b1ca7c2581e59b533

    • SSDEEP

      786432:VTCxuEnwFho+zM77UDZiZCd08jFZJAI5E70TZFH21:V2EXFhV0KAcNjxAItjC

    • Stops running service(s)

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

    • Checks for any installed AV software in registry

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks