General

  • Target

    CheatEngine75.exe

  • Size

    28.6MB

  • Sample

    241007-1vr9psygqd

  • MD5

    e703b8ac5b3601deebbf05843c9a4e97

  • SHA1

    ab154e32099776e432b4d2c31366985f27950cf1

  • SHA256

    fe6c0d8f90c9c74f2986fe169342e0a5319a3b1ffcf711b513f33db7e28e863a

  • SHA512

    8280af1c2455b37c13de60f1d4a4ab26fe7d03bed7f874b074afb4ae365f2380aa71525e7e649e924347c38efd601dd3a6b7924f56aa6c09932f24b5c2f03c65

  • SSDEEP

    786432:dTCxuEnwFho+zM77UDZiZCd08jFZJAI5E70TZFH2:d2EXFhV0KAcNjxAItj2

Malware Config

Targets

    • Target

      CheatEngine75.exe

    • Size

      28.6MB

    • MD5

      e703b8ac5b3601deebbf05843c9a4e97

    • SHA1

      ab154e32099776e432b4d2c31366985f27950cf1

    • SHA256

      fe6c0d8f90c9c74f2986fe169342e0a5319a3b1ffcf711b513f33db7e28e863a

    • SHA512

      8280af1c2455b37c13de60f1d4a4ab26fe7d03bed7f874b074afb4ae365f2380aa71525e7e649e924347c38efd601dd3a6b7924f56aa6c09932f24b5c2f03c65

    • SSDEEP

      786432:dTCxuEnwFho+zM77UDZiZCd08jFZJAI5E70TZFH2:d2EXFhV0KAcNjxAItj2

    • Manipulates Digital Signatures

      Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.

    • Stops running service(s)

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks