General
- Target CheatEngine76.exe
- Size 35.0MB
- Sample260523-1979gabv7n
- SHA256 f96eca4a678f34c5d6c5e8b3ebb0f086f17ffc869c021e5576f8b906dace0336
- MD5 e3dfd9ad1f6edf9c413cf96c6beebcad
- SHA1 d10fe35f1ba0d6111563caefd9320950405e075e
- SHA512 e0e4f6235234f7f19b5d720dc9cd2dd5f3951e34ffb869f69d10db92795ed0bdc635f0bdae632a30707f30acc417789068edfd10afe507ec6bdda66696440705
- SSDEEP 786432:KlJS4UMRrFssTfUSCB6bVwZEe8HY6KzVbIYjm7YkdgGlrLtqkWTU9gFH:KlBU4yokvme8/KRFj0jdgGHqkj9gl
- TLSH T1DE873323F7CBE43AE05A0B3345A3A01498F3AB256517AE5287ECB8ACCF755541D3E346
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
CheatEngine76.exe
Resource
win10v2004-20260513-en
24 signatures
150 seconds
Behavioral task
behavioral2
Sample
CheatEngine76.exe
Resource
win11-20260513-en
23 signatures
150 seconds
Malware Config
Targets
-
- Target CheatEngine76.exe
- Size 35.0MB
- SHA256 f96eca4a678f34c5d6c5e8b3ebb0f086f17ffc869c021e5576f8b906dace0336
- MD5 e3dfd9ad1f6edf9c413cf96c6beebcad
- SHA1 d10fe35f1ba0d6111563caefd9320950405e075e
- SHA512 e0e4f6235234f7f19b5d720dc9cd2dd5f3951e34ffb869f69d10db92795ed0bdc635f0bdae632a30707f30acc417789068edfd10afe507ec6bdda66696440705
- SSDEEP 786432:KlJS4UMRrFssTfUSCB6bVwZEe8HY6KzVbIYjm7YkdgGlrLtqkWTU9gFH:KlBU4yokvme8/KRFj0jdgGHqkj9gl
- TLSH T1DE873323F7CBE43AE05A0B3345A3A01498F3AB256517AE5287ECB8ACCF755541D3E346
- MD5 SHA1 SHA512 SSDEEP TLSH
Manipulates Digital Signatures
Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Modifies file permissions
Stops running service(s)
Checks for any installed AV software in registry
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops file in System32 directory