General
- Target Fivem_cheat.exe
- Size 2.5MB
- Sample260724-a778ksyvft
- SHA256 abc32411637cfdaa6e77a1f1b3b3dc813659b6acb125407c431b0386e2972c21
- MD5 fac30ca9b2113d5b58d275d7c4c3a946
- SHA1 c878c2d78a19d2cbe4f2d2a7ad7ab82663ddfba9
- SHA512 0d04bf66fd33a366da72253726cd5e587b46526fb7a40676b75ebaf8740b7d64529754a14c2e212f81bb34d420f2316d135e1e8d2f69992881d774404dce5cdd
- SSDEEP 49152:X30Omvq26f1hYf5+1/XSFH3nUugSdKK4duUuOEuNCVokldUQ+:X30Omvcf1hm+doH3nUugK8d1uACVjldc
- TLSH T152C501EEE11062B3EAAC0EFA9558FA5F3B4871B3A3A37D1FD1B8710501519B96301F16
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Fivem_cheat.exe
Resource
win11-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target Fivem_cheat.exe
- Size 2.5MB
- SHA256 abc32411637cfdaa6e77a1f1b3b3dc813659b6acb125407c431b0386e2972c21
- MD5 fac30ca9b2113d5b58d275d7c4c3a946
- SHA1 c878c2d78a19d2cbe4f2d2a7ad7ab82663ddfba9
- SHA512 0d04bf66fd33a366da72253726cd5e587b46526fb7a40676b75ebaf8740b7d64529754a14c2e212f81bb34d420f2316d135e1e8d2f69992881d774404dce5cdd
- SSDEEP 49152:X30Omvq26f1hYf5+1/XSFH3nUugSdKK4duUuOEuNCVokldUQ+:X30Omvcf1hm+doH3nUugK8d1uACVjldc
- TLSH T152C501EEE11062B3EAAC0EFA9558FA5F3B4871B3A3A37D1FD1B8710501519B96301F16
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Adds Run key to start application
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Indicator Removal
1File Deletion
1Modify Registry
2Obfuscated Files or Information
1Command Obfuscation
1