Overview

overview

8

Static

static

3

combatmastercheat.exe

windows7-x64

7

combatmastercheat.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    combatmastercheat.exe

  • Size

    13.2MB

  • Sample

    240611-zfp1cs1ckh

  • MD5

    f8d91f0431c70dff4a5a903674853389

  • SHA1

    20594827a53f0ef10b6f3f6a76cfb4433474941d

  • SHA256

    3b6d8c0676d4938d2539db90feba809edcdd46bbca25621a3980b73a950687df

  • SHA512

    b8b0e9398a09a9c08171f0f37e98d7fe8ee9f4d952a4691b2dd452d7a3a42802963dde854d11b925ed4147d72fd478d4e7e7fa508e3971573a7f3a304dc3a86c

  • SSDEEP

    393216:q6AcWJq1+TtIiFg0VQx/Bg/sx4wzaXkK:16Jq1QtI66BY1w9K

Score
8/10
evasionexecutionpyinstallerspywarestealer

Malware Config

Targets

    • Target

      combatmastercheat.exe

    • Size

      13.2MB

    • MD5

      f8d91f0431c70dff4a5a903674853389

    • SHA1

      20594827a53f0ef10b6f3f6a76cfb4433474941d

    • SHA256

      3b6d8c0676d4938d2539db90feba809edcdd46bbca25621a3980b73a950687df

    • SHA512

      b8b0e9398a09a9c08171f0f37e98d7fe8ee9f4d952a4691b2dd452d7a3a42802963dde854d11b925ed4147d72fd478d4e7e7fa508e3971573a7f3a304dc3a86c

    • SSDEEP

      393216:q6AcWJq1+TtIiFg0VQx/Bg/sx4wzaXkK:16Jq1QtI66BY1w9K

    Score
    8/10
    evasionexecutionspywarestealer

    • Modifies Windows Firewall

      evasion

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks