Analysis

  • user interaction
    yes
  • max time kernel
    58s
  • max time network
    58s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    30/07/2026, 09:30

General

  • Target
    CHEAT_VencordInstaller.exe
  • Size 12.1MB
  • Sample260730-lgrzfsfa55
  • SHA256 992132e6bd26940d6db892f495e16a33a2e6e6d7bd7bf98a1cae4b8e7d9f9503
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CHEAT_VencordInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\CHEAT_VencordInstaller.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4436

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/4436-0-0x00007FFEDB470000-0x00007FFEDB472000-memory.dmp

        memory/4436-2-0x00007FFEDB490000-0x00007FFEDB492000-memory.dmp

        memory/4436-1-0x00007FFEDB480000-0x00007FFEDB482000-memory.dmp

        memory/4436-5-0x00007FFEDB4C0000-0x00007FFEDB4C2000-memory.dmp

        memory/4436-3-0x00007FFEDB4A0000-0x00007FFEDB4A2000-memory.dmp

        memory/4436-4-0x00007FFEDB4B0000-0x00007FFEDB4B2000-memory.dmp

        memory/4436-6-0x00007FFEDB4D0000-0x00007FFEDB4D2000-memory.dmp

        memory/4436-7-0x00007FFEDB4E0000-0x00007FFEDB4E2000-memory.dmp

        memory/4436-11-0x00007FFEDB520000-0x00007FFEDB522000-memory.dmp

        memory/4436-10-0x00007FFEDB510000-0x00007FFEDB512000-memory.dmp

        memory/4436-8-0x00007FFEDB4F0000-0x00007FFEDB4F2000-memory.dmp

        memory/4436-18-0x00007FFEDB590000-0x00007FFEDB592000-memory.dmp

        memory/4436-20-0x000001796F200000-0x000001796F233000-memory.dmp

        memory/4436-27-0x000001796F200000-0x000001796F233000-memory.dmp

        memory/4436-26-0x000001796F200000-0x000001796F233000-memory.dmp

        memory/4436-19-0x00007FFEDB5A0000-0x00007FFEDB5A2000-memory.dmp

        memory/4436-17-0x00007FFEDB580000-0x00007FFEDB582000-memory.dmp

        memory/4436-16-0x00007FFEDB570000-0x00007FFEDB572000-memory.dmp

        memory/4436-15-0x00007FFEDB560000-0x00007FFEDB562000-memory.dmp

        memory/4436-14-0x00007FFEDB550000-0x00007FFEDB552000-memory.dmp

        memory/4436-13-0x00007FFEDB540000-0x00007FFEDB542000-memory.dmp

        memory/4436-9-0x00007FFEDB500000-0x00007FFEDB502000-memory.dmp

        memory/4436-12-0x00007FFEDB530000-0x00007FFEDB532000-memory.dmp

        memory/4436-29-0x000001796F200000-0x000001796F233000-memory.dmp