General
- Target RCHEATS.exe
- Size 396KB
- Sample260704-phra4afs2s
- SHA256 0679952ec00fa85ba47e3b360376cd916f24058bf89f73505a609bb4f0663e3d
- MD5 af65140dbeb7adea7dc68568a52d8dd8
- SHA1 4fb977135592c90cde91017166ae5d3ea6707c2c
- SHA512 2fc582cb37a2d65bc83d81a0fbae84a1f400aa807715a6275b5c1bbb2471afb3611aabd94d01745843a8ec9b971ed932f86863aa38ee7990b0ea212627a777eb
- SSDEEP 6144:H3PmCKa2ZeEERENlaT3PmCKe2ZeCERENla:H3uC4EREqT3uCqEREq
- TLSH T1758405D33B42D274C06F4631C6A99BF846227D6AC950A20B6471FE6B7B34253DD02EDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RCHEATS.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
RCHEATS.exe
Resource
win11ltsc2024-20260630-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target RCHEATS.exe
- Size 396KB
- SHA256 0679952ec00fa85ba47e3b360376cd916f24058bf89f73505a609bb4f0663e3d
- MD5 af65140dbeb7adea7dc68568a52d8dd8
- SHA1 4fb977135592c90cde91017166ae5d3ea6707c2c
- SHA512 2fc582cb37a2d65bc83d81a0fbae84a1f400aa807715a6275b5c1bbb2471afb3611aabd94d01745843a8ec9b971ed932f86863aa38ee7990b0ea212627a777eb
- SSDEEP 6144:H3PmCKa2ZeEERENlaT3PmCKe2ZeCERENla:H3uC4EREqT3uCqEREq
- TLSH T1758405D33B42D274C06F4631C6A99BF846227D6AC950A20B6471FE6B7B34253DD02EDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE