Analysis

  • max time kernel
    60s
  • max time network
    24s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/07/2026, 09:30

General

  • Target
    CHEAT_VencordInstaller.exe
  • Size 12.1MB
  • Sample260730-lgrzfsfa55
  • SHA256 992132e6bd26940d6db892f495e16a33a2e6e6d7bd7bf98a1cae4b8e7d9f9503
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CHEAT_VencordInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\CHEAT_VencordInstaller.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4560

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        memory/4560-0-0x00007FFF66630000-0x00007FFF66632000-memory.dmp

        memory/4560-1-0x00007FFF66640000-0x00007FFF66642000-memory.dmp

        memory/4560-2-0x00007FFF66650000-0x00007FFF66652000-memory.dmp

        memory/4560-3-0x00007FFF66660000-0x00007FFF66662000-memory.dmp

        memory/4560-4-0x00007FFF66670000-0x00007FFF66672000-memory.dmp

        memory/4560-5-0x00007FFF66680000-0x00007FFF66682000-memory.dmp

        memory/4560-6-0x00007FFF66690000-0x00007FFF66692000-memory.dmp

        memory/4560-7-0x00007FFF666A0000-0x00007FFF666A2000-memory.dmp

        memory/4560-8-0x00007FFF666B0000-0x00007FFF666B2000-memory.dmp

        memory/4560-9-0x00007FFF666C0000-0x00007FFF666C2000-memory.dmp

        memory/4560-10-0x00007FFF666D0000-0x00007FFF666D2000-memory.dmp

        memory/4560-11-0x00007FFF666E0000-0x00007FFF666E2000-memory.dmp

        memory/4560-12-0x00007FFF666F0000-0x00007FFF666F2000-memory.dmp

        memory/4560-13-0x00007FFF66700000-0x00007FFF66702000-memory.dmp

        memory/4560-14-0x00007FFF66710000-0x00007FFF66712000-memory.dmp

        memory/4560-15-0x00007FFF66720000-0x00007FFF66722000-memory.dmp

        memory/4560-16-0x00007FFF66730000-0x00007FFF66732000-memory.dmp

        memory/4560-17-0x00007FFF66740000-0x00007FFF66742000-memory.dmp

        memory/4560-18-0x00007FFF66750000-0x00007FFF66752000-memory.dmp

        memory/4560-19-0x00007FFF66760000-0x00007FFF66762000-memory.dmp

        memory/4560-20-0x0000023255410000-0x0000023255443000-memory.dmp

        memory/4560-26-0x0000023255410000-0x0000023255443000-memory.dmp

        memory/4560-27-0x0000023255410000-0x0000023255443000-memory.dmp

        memory/4560-29-0x0000023255410000-0x0000023255443000-memory.dmp