888eee4cc6ce5f3b4c975650d10a753de4e4fd2c9178e14f6f2cc66e8a15f8b6

Sharing

Copy URL Twitter E-mail

General

Target
cheat-engine-7.5.zip
Size 14.4MB
Sample260517-t8fphabs7x
SHA256 888eee4cc6ce5f3b4c975650d10a753de4e4fd2c9178e14f6f2cc66e8a15f8b6
MD5 ba6ef7c7d845e5e5d45a191eadf95402
SHA1 d51c34d33f2e52448f93bfca6c917f8205553d2e
SHA512 9e96d7f941ceac78aaf2e6d5f206cc45bd48d3b7b2b86bea852ad5da48eba9dcf9f6f51f46ed46d61b563037243ea2f8aba08ba0a3524ae3f82b91b8c78f248a
SSDEEP 393216:P2U6MWjEg5rGECCEGITciQXEtlWxIC1MXTcy91:P2U6MgJJGEDvPiQXOlWSS+91
TLSH
T119E612FAF1DC2D79F9A45B7160021A2FD9809626F26ECF51CCA734B4BC564887B50EC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

execution

Malware Config

Targets

- Target
  cheat-engine-7.5/Cheat Engine/lua/lua.pas
- Size 26KB
- SHA256 599a1dcd632520113a9c349206cc04c1212d24961bbb899d1caa7f0fad429f85
- MD5 f9bd1c950aa2da4529990e82170d3194
- SHA1 0416915cd0104bbbd731f8cb381e74dd6bf9da53
- SHA512 ef322e4cd54891fb0203070af497fbf013dad0d6794754aa637ac4e815b779ad88679c0fa87067f44d877a99e421a0e9dbaf866c1dfd1c0f20d870736d333b23
- SSDEEP 384:0WSnCYnTcytN19bxy4cGCNVoDgk3IqYx/3NOrgprqs:YfnIytN19bxncGCNV9x/3fpWs
- TLSH
  T1DDC2580EFB8179E1CA1A1A66675B57C58AF124C323C88991748CDCF10BE9F6D913ED8C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  cheat-engine-7.5/Cheat Engine/lua53/lua53/Makefile
- Size 3KB
- SHA256 c75ab190231eeb19c8f96a672edc7613147270eb69555c3be510b8f67a4fdba2
- MD5 2b446db30756348b9f45d58aed906247
- SHA1 cb347996e2ef5553d56c58b61a050fc3cf254760
- SHA512 573e092448939cf626c1aba5143f11c24daa5ce7331b1cfd8ac686c2b4bd76d36d7cad0a63f1c0feb52f42c63a7c3b6d495c9808c60ba293a8ebae8ed7f2dcc9
- TLSH
  T1EF619CC9F71EDAD6240106B182BF72477792459A376E3D34E8772C6388453AF202BD31
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  cheat-engine-7.5/Cheat Engine/lua53/lua53/src/32.bat
- Size 406B
- SHA256 eda0463e9a8351ba0e8a33addf0c2b6283800f9990ef4430d9ebdd64bb1e8708
- MD5 781a5ea3ac1db8b8baef18e7f7a7a83f
- SHA1 30d3a72d187fa326f5e71f4cb47d2ede84b9902b
- SHA512 87a9ed1cdc25e5293392458487c7b7f9af48b2250c0644a2c97f7861050ea4e8d758be79034d4dace0713b88c1c5f7b3d917fc302b039ad7c1001a1345fbe832
- TLSH
  T196E06D2D900E8884B28F5FD4CE089E47E009AFC826319091BEBFA4E77D619534B25829
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  cheat-engine-7.5/Cheat Engine/lua53/lua53/src/64.bat
- Size 405B
- SHA256 9f26e0db49fa923c68b7979d977e8b2e5aee8810758e4c1e8e31861f51c7066a
- MD5 02d0494bf187b5ebf89a5f1d6a6723b4
- SHA1 2b86f69954a33510dd2ff6ae151c2a83aec4d9e2
- SHA512 30c6b4929d86bb3e2613a3fd342a08539ceed259733aa1625b33c91f144d8fecd6bec31c64c4ca9f72cffda16f98b18e64f3236c8490e1a97c69b86c39c8dc30
- TLSH
  T115E0ED1D910E8484B20F8F84CE084E07EC03AFC4463090A1AEBFFCF77D019924B38928
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  cheat-engine-7.5/Cheat Engine/lua53/lua53/src/Makefile
- Size 6KB
- SHA256 ffdf7466d4264426b17956cf0c6365d1a3e0dedbf590cfb590068dc8a07238de
- MD5 e827fad9bd859321fd0683a10163b3ad
- SHA1 bf8e5ddaebbf054cd10dad89ed70e93b7e71154b
- SHA512 fa70cf654ea19a37a878c69bed26d987bfeeb6ba1457e55ab0484e448f16a8022a6e4f0dad4cfd8457b374393ef0f7a41008b4e007b06e66550ca8c64aeccc2d
- SSDEEP 192:WRZSMuSOq2Q2Qo242J2/o2O282h2i2Qi212a22i2jy242a2SSn:WGMuTqvHoDe+o/zEzHiomHYyzxun
- TLSH
  T137E1FFDF150D6FE06840C864E8C92C07B9C28EC59F3D966BD9474855F4BC35F60B6A36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral9
- Target
  cheat-engine-7.5/Cheat Engine/lua53/lua53/src/ldo.c
- Size 21KB
- SHA256 876175423641e4c96d140ecfc6bfca2be9af4d1bd206879a7f1302ebf14b6c20
- MD5 291c032025d4f4813c08a7305ff7dbc5
- SHA1 5605c2fdcf2f0d5e32b69cec4ba33e9a0991232b
- SHA512 cf892d80a179789564014e19e7afa80e6cad48ffd6e4c1015d56fc52b86d69dd4ac289f9d7c977e21fe900d187a34dcb76a99710b16c3588225e3d0c913e0476
- SSDEEP 384:Z1e5szRxKW8hVJtTXeqc11l+QHAjFY7H97jfBDYZZM51P5u3o:ZxgJtTXeqE+QIYlbBDCwJ5u3o
- TLSH
  T1BFA2A64F9CD0311394933B34A68BA2F99BA9D9971355D8C0BC8C92943F1077EE26E6E4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  cheat-engine-7.5/Cheat Engine/lua53/lua53/src/make_uname.bat
- Size 947B
- SHA256 7a167d02aa492092044784cdc6e8f5b1e289731990fff44dcd26be9cf0f810f1
- MD5 98fa320a49ffa26d28c5c6bbf9d0de12
- SHA1 b0a49d457ad15eb9cbe537556227a4fa8f52b415
- SHA512 cafd9b86a655d7b9f118e59c60b5365bc5042f346781820ac8d122942a81258591630a81043eeec7120da5bc03a06856e5c9da9659d6f786012c87d0d6291fc6
- TLSH
  T1CD1134EFD02266BEFD542F33171E49CFC0375622A0AC2368B53AC2A4A7CD94203C51B0
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  cheat-engine-7.5/Cheat Engine/lua53/lua53/src/tecmake.mak
- Size 37KB
- SHA256 cfbce33e7e7b7e71449e4c1c56de37f3f0e1d37bd8ad9f467f54d56fd672d5cd
- MD5 09b6c9b2468afc5a5c3745a922a6bfb3
- SHA1 df5613e3998d9acbecdf62f3d1a05fcf4893e66c
- SHA512 a927dd63c9f6d982c557ada4905ac49937d098e21f464f4c6be46cb731098ff441256a150ff0621dffd1f0f6b9f72a6fe7c28c0b6ba09c43319a79e980790d24
- SSDEEP 768:Z+ysGqxu8/nOVLNek+pX65E1IwJh7jvGufFRJx+MWqD4vzRzzzizAzqFWzXzBzq6:Z+yB8/KNek+pX6uh7GufSMrD4vzRzzzd
- TLSH
  T1BE037332BD292D882763D1F7B300158BEA0B16A7C751F1B1B14D8DE01FE7269635EB92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  cheat-engine-7.5/Cheat Engine/lua53/lua53/src/tecmakewin.mak
- Size 34KB
- SHA256 d785a91ffa1e45191f7e4f050ac888cabe312839d9e7cd85cb36273d79dcd6bd
- MD5 4837137f5cc90a8a3119c4db3a2da77a
- SHA1 93cfe70743724100511281022425aa0f4a0c2d49
- SHA512 e8c344593db42b7325bf98680fe0a88d7c4c5bb1ed7b679a608f8d6ffd97552a090abec94304bf74a87457673a3cb828ccaa4b020be73595e54e4ebc507e8749
- SSDEEP 768:SNmbK+Et5eEFIhjSzqz9zMMtMkMWM9Vd56kQhzdJlfj84Qb1lF5zZlq1d63tvDoC:eKK+Et56jSzqz9zMMtMkMWMHX5zXQ6eC
- TLSH
  T137F2B7377E1619C91B23C0F2A344224AD50B56FBCE53E5B2714CCDF00B912DA936EBA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  cheat-engine-7.5/Cheat Engine/luacalendar.pas
- Size 4KB
- SHA256 180182fb65d20af13468389ba3d051e41ab3a40ad6c5cd3fae01cfefa5a5b239
- MD5 5aabe06b86d24ff977a16290325c7300
- SHA1 39d5c982c9da3e8bd958022898a5f4abf7378f78
- SHA512 57c6e468841fd8d21f39af21263d0fb654d3e421aedcd8dcd7408ec5c7c4b17bdb6ffe9d28f988e3bc5b27e93767dc4d817c9bf2d7443ecf12810c0bf200247f
- SSDEEP 48:Belvk2W4DVXhW1+OmmfgxDgRYZ1f7Er9EAFNoFwdZ9REo3oFU5Z9toDqcHfPyaFo:Belvk248t6PFFX5kqcHfPyaFj6Df
- TLSH
  T1B6912149AE0123F5193005FC91156200CA04144726DAAA97F8FDAF942FEAC6DF3BEF5D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  cheat-engine-7.5/Cheat Engine/luaremoteexecutor.pas
- Size 26KB
- SHA256 adcd6f7a7b8bee0d27e680c43a845d689509d2367177b59dfbbbcdaf390fbaec
- MD5 aa32da47e80757ad11cf96e99494e3f1
- SHA1 f8c76ec9dd8c4a3a876b93080635b4b163a7bc7f
- SHA512 8866daab8e2988f99322bdde815b27ef6f346e88d11170fab5b7bb651896c06181ce8ed315b6441cc7b039f0745ddad98ed131b1d7eadb270a550120a2437100
- SSDEEP 768:4dO0ASe6gdYmTGjZTjP15vQD+czQPt1IbsHUz/it/z+:4YsHQD+c+1JHm/i/i
- TLSH
  T1F7C27215BE3E17B251B2508217EB91426717124F2250D0F474EECE402F9AB9EB5B8FBD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral21 behavioral22
- Target
  cheat-engine-7.5/Cheat Engine/memscan.pas
- Size 278KB
- SHA256 0de447d97cc55e38be3a51ff92eced2e5ad66de52b9c6c48ef8f157cb084b5c2
- MD5 deb51cc76f91f6fd7c2b5556e91d55cf
- SHA1 d890201bbf078c52c19da513171b10977e43c0e8
- SHA512 8a1836a3e5399739d46cd4878297a120d02fd85cd52896a62aef92cd7682dd7c1aa02edc7457c394d2f183d6a9c3a1a650f2dd0ce6a3bd6b81a4d54fd254eb9e
- SSDEEP 6144:E99uirwfm2mG37nTp7zPLPt5/ljys2Tcdd5i+tqlM6YafiRvdfeG/0/uVa09He80:EmiFgpfPLPtfys2Tcdd5i+tqlMnafiR2
- TLSH
  T10E549517BE6616F18A70842D5E490415DB5B518391400AF4B98C96A43FF0CFEEAFABFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  cheat-engine-7.5/Cheat Engine/mikmod.pas
- Size 18KB
- SHA256 72005f4a2984865d14c036dffab694e839e75371aac2da14345ef395e5d55862
- MD5 9112ab512429744f831654fd2d3f68c0
- SHA1 c87bba0473adb1b93c85976a9b97e89a7aabe7ec
- SHA512 d4b69ffafd886145407e0d01073020137f83f3adb079fc3c92932dca7f17bf131d64d8823fe3f3fb455d706424688a574bc8e42cceb0c5e6a6c8ccf539d8eec8
- SSDEEP 192:drDLDZSbRbZBc2RxblJG4KLOIyJNiMkMx8uEf0JxdbBP4iYLddXI2d5i4KZM7T6e:drtSbR7JG4KLskMxcempLiQQEX
- TLSH
  T1DE8274CED97E76E1653660E837560B01C3462013A79EC712B0ACF1AD1FB946E41EDBAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  cheat-engine-7.5/Cheat Engine/networkInterface.pas
- Size 70KB
- SHA256 9423a02d3444b2ee8dae23b97b0f32fcc9fd9eebe8c5dd9bc537a64c09ff5a39
- MD5 0f27f467c032143f7481d9e6b7363273
- SHA1 2fda266abfd0eb20cba5aa98ed1df112ed30abc9
- SHA512 2f5702c35edaa0535d532b8876621c263a888a3a94aab5f5ee2f3b5ce62346461318bd40d557449253aca358d5ca8285ebd78c49c320ad5100c6291280d1b36e
- SSDEEP 1536:5p+sgc2VJMYRlKCZxhBrE9qh9BcchiApyzTx5Yof:5p+sFklKCZxhBrE9qh9ycYT8u
- TLSH
  T1A0637696ADAF12A279F594297F81420BC752005302A406F4B4ACEFE42FB95EDD1F17EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  cheat-engine-7.5/Cheat Engine/networkInterfaceApi.pas
- Size 13KB
- SHA256 3820485f27b422b924a6961411286b1c7c8549592ba2e724be6005bc704a04a7
- MD5 618fbff8e1db7b94a48f8bab682658d2
- SHA1 5d9545a60fd884dd4b35129558e74ae0d040f657
- SHA512 e3131c0adbeac6748173bc33d906e5573c4681b3630c564bccc0302607c8a4b84a3fd06d941f9f82cc877f2c6b40f46b613ed4eba1f422524c5a35bed663667f
- SSDEEP 192:Rg0ku5kqO2wpK4vwjdajUyEDMprqwOql2VJAGGwNGFMQStFgjh6xgUjk4uTOzy2S:RgLNK4vwdMp4XsDSzIV1C7d0ZB
- TLSH
  T121524145BC4E71A25B73682966070206CB364042477B04F9B1ADD3F65FFE2D8A1EA3ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  cheat-engine-7.5/Cheat Engine/olddebugger.pas
- Size 95KB
- SHA256 5db76b857cbc46d629d327dc491c73b6dc251ada01055da924bc639bfef3c589
- MD5 82789aba547746b1e5c0ad110a27b14d
- SHA1 015c678c3a6be1990196eec57844479147e891f3
- SHA512 b17eee3c495a26365c8efda2836c51028231f383f024730c3dfec9e24d2770448ec5360ab46561d71a169aed0f06ca1dc24202d6297c9792e031accd058c516e
- SSDEEP 1536:bq1ZQgTY8oL4R2i6zhMeXuwSp3oU7Y7RP:W1ZQKYGSuwSp3oU7YB
- TLSH
  T1F7937276D94E21F79BF4903CAF421407D767418783958772B09CCAA42FF50A9C2F2BA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Enumerates connected drives

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32