Resubmissions

06-07-2024 11:21

240706-nf5v2axfmp 10

06-07-2024 11:19

240706-newkzazfnb 10

General

  • Target

    cheat(crack).zip

  • Size

    14.6MB

  • MD5

    9db2701b78b75b6a7c9eec69e9e47567

  • SHA1

    90ddb7066d36ebe0a9b06167686bd0cdb31ead57

  • SHA256

    8f072667734355c2836fadb63f16ba18efb7af075fdea66c0b80307d8cb56562

  • SHA512

    3ef8ba883bb94e5045185bc39028d4e64615fff85969f298f5e557c5bca5def33a4605ece24d2b56f21a48a0470e3c730061ca16374e22d987e465dbb344b867

  • SSDEEP

    393216:6/sn7aBWgCpvwuC+ek5HQcfHUm4qd3oF/lr9xowPcDwr:6C7aInve0QcPUWc/lZxxz

Score
10/10

Malware Config

Signatures

  • A stealer written in Python and packaged with Pyinstaller 1 IoCs
  • Blankgrabber family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cheat(crack).zip
    .zip

    Password: 123456

  • cheat(crack)/Cheat_(crack).exe
    .exe windows:5 windows x64 arch:x64

    Password: 123456


    Headers

    Exports

    Sections

  • �n��>��.pyc
  • cheat(crack)/PASSWORD 123456.txt
  • cheat(crack)/README.txt
  • cheat(crack)/api-ms-win-core-console-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64

    Password: 123456


    Code Sign

    Headers

    Exports

    Sections

  • cheat(crack)/api-ms-win-core-console-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64

    Password: 123456


    Code Sign

    Headers

    Exports

    Sections

  • cheat(crack)/api-ms-win-core-datetime-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64

    Password: 123456


    Code Sign

    Headers

    Exports

    Sections

  • cheat(crack)/api-ms-win-core-debug-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64

    Password: 123456


    Code Sign

    Headers

    Exports

    Sections

  • cheat(crack)/api-ms-win-core-errorhandling-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64

    Password: 123456


    Code Sign

    Headers

    Exports

    Sections

  • cheat(crack)/api-ms-win-core-file-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64

    Password: 123456


    Code Sign

    Headers

    Exports

    Sections

  • cheat(crack)/api-ms-win-core-file-l1-2-0.dll
    .dll windows:10 windows x64 arch:x64

    Password: 123456


    Code Sign

    Headers

    Exports

    Sections

  • cheat(crack)/api-ms-win-core-file-l2-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • cheat(crack)/api-ms-win-core-handle-l1-1-0.dll
    .dll windows:10 windows x64 arch:x64


    Code Sign

    Headers

    Exports

    Sections

  • cheat(crack)/bin/awt.dll
    .dll windows:6 windows x64 arch:x64

    ea7176aa3cd3f2b70fc20c2d36a7803d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cheat(crack)/bin/bci.dll
    .dll windows:6 windows x64 arch:x64

    931c3eaf366ace94b47c2f253fe09957


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cheat(crack)/bin/dcpr.dll
    .dll windows:6 windows x64 arch:x64

    4d23430ef401f6cbc26d7c40430badaa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cheat(crack)/bin/decora_sse.dll
    .dll windows:6 windows x64 arch:x64

    2012266ce111230feef1a6295a86ca08


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cheat(crack)/bin/deploy.dll
    .dll windows:6 windows x64 arch:x64

    e48a326db8d85b8a210a3a655ce8c031


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cheat(crack)/bin/dt_shmem.dll
    .dll windows:6 windows x64 arch:x64

    a6030c7e1f1d030e1b27153c1c018ed6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cheat(crack)/bin/dt_socket.dll
    .dll windows:6 windows x64 arch:x64

    098109fb70fd25a250cbad53c0b5df79


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cheat(crack)/bin/eula.dll
    .dll windows:6 windows x64 arch:x64

    96a9d07b5fbc45c4ed8d72e02a845a3e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cheat(crack)/bin/fontmanager.dll
    .dll windows:6 windows x64 arch:x64

    15d9b72e57dd0f0a8154ef2fab077e1b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cheat(crack)/bin/fxplugins.dll
    .dll windows:6 windows x64 arch:x64

    d12b402ed39e0c9c0c5a5b0361a1a0a2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cheat(crack)/bin/glass.dll
    .dll windows:6 windows x64 arch:x64

    ae4606c81380c3706cd8c85bdb15ba09


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cheat(crack)/bin/glib-lite.dll
    .dll windows:6 windows x64 arch:x64

    8cbc8ae9994f5c53b35718b26f7ed1e2


    Code Sign

    Headers

    Imports

    Sections

  • cheat(crack)/bin/gstreamer-lite.dll
    .dll windows:6 windows x64 arch:x64

    8e9621e6e5eaef19ba1380fccbef0286


    Code Sign

    Headers

    Imports

    Sections

  • cheat(crack)/bin/hprof.dll
    .dll windows:6 windows x64 arch:x64

    d58a66612a1d24916f7f06eeed4784eb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cheat(crack)/bin/instrument.dll
    .dll windows:6 windows x64 arch:x64

    7974047f59a8581875945333e94e30e9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cheat(crack)/bin/j2pcsc.dll
    .dll windows:6 windows x64 arch:x64

    cca597b8c4135d09b1f86433902a28e3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cheat(crack)/bin/j2pkcs11.dll
    .dll windows:6 windows x64 arch:x64

    7eeccf1ed1c7423bb7d9437d91a970d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • cheat(crack)/fonts/LucidaBrightDemiBold.ttf
  • cheat(crack)/fonts/LucidaBrightDemiItalic.ttf
  • cheat(crack)/fonts/LucidaBrightItalic.ttf
  • cheat(crack)/fonts/LucidaBrightRegular.ttf
  • cheat(crack)/fonts/LucidaSansDemiBold.ttf
  • cheat(crack)/fonts/LucidaSansRegular.ttf
  • cheat(crack)/fonts/LucidaTypewriterBold.ttf
  • cheat(crack)/fonts/LucidaTypewriterRegular.ttf
  • cheat(crack)/security/blacklist
  • cheat(crack)/security/blacklisted.certs
  • cheat(crack)/security/cacerts
  • cheat(crack)/security/java.policy
  • cheat(crack)/security/java.security
  • cheat(crack)/security/javaws.policy
  • cheat(crack)/security/policy/limited/US_export_policy.jar
    .jar
  • cheat(crack)/security/policy/limited/local_policy.jar
    .jar
  • cheat(crack)/security/policy/unlimited/US_export_policy.jar
    .jar
  • cheat(crack)/security/policy/unlimited/local_policy.jar
    .jar
  • cheat(crack)/security/public_suffix_list.dat
    .zip