068e727f7a752a65815025756376baa1ae5622a6518cf8056764cfffa7d0b815 | Triage

Submit
Reports

Overview

overview

Static

static

3

cheat-Clie...er.exe

windows7-x64

1

cheat-Clie...er.exe

windows10-2004-x64

1

cheat-Clie...L2.dll

windows7-x64

1

cheat-Clie...L2.dll

windows10-2004-x64

1

cheat-Clie...61.dll

windows7-x64

1

cheat-Clie...61.dll

windows10-2004-x64

1

cheat-Clie...61.dll

windows7-x64

1

cheat-Clie...61.dll

windows10-2004-x64

1

cheat-Clie...59.dll

windows7-x64

1

cheat-Clie...59.dll

windows10-2004-x64

1

cheat-Clie...et.exe

windows7-x64

cheat-Clie...et.exe

windows10-2004-x64

cheat-Clie...ry.bat

windows7-x64

1

cheat-Clie...ry.bat

windows10-2004-x64

1

cheat-Clie...ve.exe

windows7-x64

1

cheat-Clie...ve.exe

windows10-2004-x64

1

cheat-Clie...re.exe

windows7-x64

1

cheat-Clie...re.exe

windows10-2004-x64

1

cheat-Clie...al.exe

windows7-x64

1

cheat-Clie...al.exe

windows10-2004-x64

1

cheat-Clie...re.dll

windows10-2004-x64

1

cheat-Clie...lp.dll

windows10-2004-x64

1

cheat-Clie...at.exe

windows7-x64

1

cheat-Clie...at.exe

windows10-2004-x64

1

cheat-Clie...te.exe

windows7-x64

1

cheat-Clie...te.exe

windows10-2004-x64

1

cheat-Clie...dk.dll

windows7-x64

1

cheat-Clie...dk.dll

windows10-2004-x64

1

cheat-Clie...dl.dll

windows7-x64

1

cheat-Clie...dl.dll

windows10-2004-x64

1

cheat-Clie...64.dll

windows7-x64

1

cheat-Clie...64.dll

windows10-2004-x64

1

Resubmissions

01/10/2024, 19:40

241001-ydxrra1bke 10

Analysis

max time kernel
149s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
01/10/2024, 19:40

Sharing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

cheat-Client-18.4/DDNet-Server.exe

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

cheat-Client-18.4/DDNet-Server.exe

Resource

win10v2004-20240910-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

cheat-Client-18.4/SDL2.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral4

Sample

cheat-Client-18.4/SDL2.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

cheat-Client-18.4/avcodec-61.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

cheat-Client-18.4/avcodec-61.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

cheat-Client-18.4/avformat-61.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral8

Sample

cheat-Client-18.4/avformat-61.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

cheat-Client-18.4/avutil-59.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

cheat-Client-18.4/avutil-59.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

cheat-Client-18.4/cheat ddnet.exe

Resource

win7-20240708-en

asyncrat stormkitty default discovery persistence privilege_escalation rat spyware stealer

windows7-x64

19 signatures

150 seconds

Behavioral task

behavioral12

Sample

cheat-Client-18.4/cheat ddnet.exe

Resource

win10v2004-20240802-en

asyncrat stormkitty default discovery persistence privilege_escalation rat spyware stealer

windows10-2004-x64

19 signatures

150 seconds

Behavioral task

behavioral13

Sample

cheat-Client-18.4/config_directory.bat

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

cheat-Client-18.4/config_directory.bat

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

cheat-Client-18.4/config_retrieve.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

cheat-Client-18.4/config_retrieve.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

cheat-Client-18.4/config_store.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

cheat-Client-18.4/config_store.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral19

Sample

cheat-Client-18.4/data/krx/DDNet_original.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral20

Sample

cheat-Client-18.4/data/krx/DDNet_original.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral21

Sample

cheat-Client-18.4/dbgcore.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral22

Sample

cheat-Client-18.4/dbghelp.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral23

Sample

cheat-Client-18.4/demo_extract_chat.exe

Resource

win7-20240708-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral24

Sample

cheat-Client-18.4/demo_extract_chat.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral25

Sample

cheat-Client-18.4/dilate.exe

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral26

Sample

cheat-Client-18.4/dilate.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral27

Sample

cheat-Client-18.4/discord_game_sdk.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral28

Sample

cheat-Client-18.4/discord_game_sdk.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral29

Sample

cheat-Client-18.4/exchndl.dll

Resource

win7-20240903-en

windows7-x64

0 signatures

150 seconds

Behavioral task

behavioral30

Sample

cheat-Client-18.4/exchndl.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral31

Sample

cheat-Client-18.4/libcrypto-3-x64.dll

Resource

win7-20240903-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral32

Sample

cheat-Client-18.4/libcrypto-3-x64.dll

Resource

win10v2004-20240802-en

windows10-2004-x64

0 signatures

150 seconds

Report Analysis Logs

General

Target

cheat-Client-18.4/avformat-61.dll
Size

502KB
MD5

179f9ae9eb9e05411966a0d943e75360
SHA1

a543163fbea7ba8061da700133cc97e9ebcda589
SHA256

b72292ed8140957752e45880b597b6e1a673fb66e740379d29614dee1454d3a2
SHA512

ca77ce3fb5e345ea6304c9d405de577b164224df01ca25ce1ae560ab82463dfa6b0dacd6880d8d8821b15d3892f8d12bbee76832dee1cfef083b74f127949fc0
SSDEEP

12288:vHoTMfa6+pLH1SicSrISTE6bj3tZEdEyd:vHp0HnHASfyd

Score

1^/10

Malware Config

Signatures

Processes

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\cheat-Client-18.4\avformat-61.dll,#1
1⤵
PID:1880

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1880-0-0x00007FFD16070000-0x00007FFD160F7000-memory.dmp

Filesize
540KB

Download
memory/1880-3-0x0000000064940000-0x0000000064955000-memory.dmp

Filesize
84KB

Download
memory/1880-2-0x00007FFD05910000-0x00007FFD05CDF000-memory.dmp

Filesize
3.8MB

Download
memory/1880-1-0x00007FFD05CE0000-0x00007FFD06DF4000-memory.dmp

Filesize
17.1MB

Download

© 2018-2025

Terms | Privacy