0aec8cd5955610564c0ee4c4d18815d3c7fc950834dcac481b63f3b587e7a996

General

Target
MXL XCHEAT.rar
Size 2.5MB
Sample260627-kqe6kshx2y
SHA256 0aec8cd5955610564c0ee4c4d18815d3c7fc950834dcac481b63f3b587e7a996
MD5 e502c5e14fb8dd1f08e9a57aeae47ae0
SHA1 65e610816cc07de07fa241b115f4ed246870824f
SHA512 bed9e07c31f5b963884299ea8c5fae246e18c0d282642b425e1ce6e9ebe2eec0ab11791b57101c5083683d2c368498aa1c8137285424750eb6d439de884c6a2a
SSDEEP 49152:GXKNWvB1iu5CsISyRXtnUdxiRzHgDCywM0lv3rRk84UymK8wvuw3GDZ:xWvSuoTSyRtWu9ltlfFTH
TLSH
T1E6C533085B2AB5167443FAE46F93702BA8246D43A3EC87D4BA31F7C7C59F14AB5423E1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  MXL XCHEAT.rar
- Size 2.5MB
- SHA256 0aec8cd5955610564c0ee4c4d18815d3c7fc950834dcac481b63f3b587e7a996
- MD5 e502c5e14fb8dd1f08e9a57aeae47ae0
- SHA1 65e610816cc07de07fa241b115f4ed246870824f
- SHA512 bed9e07c31f5b963884299ea8c5fae246e18c0d282642b425e1ce6e9ebe2eec0ab11791b57101c5083683d2c368498aa1c8137285424750eb6d439de884c6a2a
- SSDEEP 49152:GXKNWvB1iu5CsISyRXtnUdxiRzHgDCywM0lv3rRk84UymK8wvuw3GDZ:xWvSuoTSyRtWu9ltlfFTH
- TLSH
  T1E6C533085B2AB5167443FAE46F93702BA8246D43A3EC87D4BA31F7C7C59F14AB5423E1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Executes dropped EXE
behavioral1
- Target
  MXL XCHEAT.exe
- Size 4.1MB
- SHA256 7004e942f3756ae78d4d4c8a47a4dc7fa793362b53154967c203d282720b8144
- MD5 6d2aa93984b6897e39d3dab240ac5317
- SHA1 dcb20106e6a42e883e893d83d0d8937298e0999b
- SHA512 d3699c012ee9c3d431ce22af40fadc1575f728105023ca32eb5cb8f854ffd149d36646deb386a6906994151a233894edd475f82ebc03da61d783844b29ec8fe0
- SSDEEP 98304:un9wlFyAD22DbzDT6OI2fPKV6gxXQDNFMxW:XVD22Xup2fPKDxgDNOx
- TLSH
  T19816E007F3D346A8D2A6D278D87A932BD670B4151B3187CB36D04B72AF93AC09E79750
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral2
- Target
  WinDivert.dll
- Size 46KB
- SHA256 c1e060ee19444a259b2162f8af0f3fe8c4428a1c6f694dce20de194ac8d7d9a2
- MD5 b2014d33ee645112d5dc16fe9d9fcbff
- SHA1 aa69498562d350f2de06954b133e59fac1e57002
- SHA512 37014a018b9cd91b2eaeeccc7c5af3838fcae4d4fe6bb50c7ae32cd5c99423965a3e3efb29499324f6885b8f0c2ee2952cb75ab73db4e8960811abcb46801f15
- SSDEEP 768:Qjf2rf/kxpxI+JEw2VWHDDjQSQX4zTtllgwBqWocwTicI:YuT/CXHDvVQatonTic
- TLSH
  T17423D803F74151B7C429C27083AED352AE22FCC56354F9EF82DEB7952D85E42DB1A606
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3