General

  • Target

    RyzenCheats.exe

  • Size

    7.0MB

  • Sample

    241201-bpxjsswpck

  • MD5

    3c26d465bf6dd82e7f71bed4e27ccda8

  • SHA1

    3567016633fcf38a2f99e9057576fd137e8f8cf7

  • SHA256

    281051000b4c438286c555efa721d8f230556ff30b2610b3a5e119adb4ecb430

  • SHA512

    21c2efa74197397e9321df222b1e0049051bc6c855337ba2943f695b9ce2a8ad3ae467213cb48924a8958cdae4ad56a47c4de66b646298a50b6da2f83c351062

  • SSDEEP

    98304:Dedt7zdbM+Q2y+aoWqE5jOjFgFQlwq4Mjk+dBZtu9xTtwz/aer6/Bb2EJ1nL2hBA:DG70lOjmFQR4MVGFtwLPmnL2hqn

Malware Config

Targets

    • Target

      RyzenCheats.exe

    • Size

      7.0MB

    • MD5

      3c26d465bf6dd82e7f71bed4e27ccda8

    • SHA1

      3567016633fcf38a2f99e9057576fd137e8f8cf7

    • SHA256

      281051000b4c438286c555efa721d8f230556ff30b2610b3a5e119adb4ecb430

    • SHA512

      21c2efa74197397e9321df222b1e0049051bc6c855337ba2943f695b9ce2a8ad3ae467213cb48924a8958cdae4ad56a47c4de66b646298a50b6da2f83c351062

    • SSDEEP

      98304:Dedt7zdbM+Q2y+aoWqE5jOjFgFQlwq4Mjk+dBZtu9xTtwz/aer6/Bb2EJ1nL2hBA:DG70lOjmFQR4MVGFtwLPmnL2hqn

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target

      �aho.pyc

    • Size

      1KB

    • MD5

      71472ca3dcb93448d7dcb75426148787

    • SHA1

      5074bff160f3bdf9daeac7e3e1d18290fbf105ed

    • SHA256

      6d5bc0aad0070286267cc3d8f745c5461f6fca8630e034a3e75c074c7c8f2e7f

    • SHA512

      82de6d24d8ad3b9d827931640be2bc776d875b9b13e7f8286b299504eb919b3e22e8b1c14726263dda7530b6bed2d37eb33e82663beebcc9eafe1161d3b49b05

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks