Overview

overview

7

Static

static

3

Cheat_Menu.rar

windows10-2004-x64

7

Cheat_Menu.rar

windows11-ltsc_2024-x64

1

Cheat_Menu...er.exe

windows10-2004-x64

1

Cheat_Menu...er.exe

windows11-ltsc_2024-x64

1

Cheat_Menu...ins.sh

ubuntu-18.04-amd64

3

Cheat_Menu...ins.sh

debian-9-armhf

3

Cheat_Menu...ins.sh

debian-9-mips

Cheat_Menu...ins.sh

debian-9-mipsel

Cheat_Menu...ch.txt

windows10-2004-x64

1

Cheat_Menu...ch.txt

windows11-ltsc_2024-x64

1

Cheat_Menu...nu.css

windows10-2004-x64

7

Cheat_Menu...nu.css

windows11-ltsc_2024-x64

3

Cheat_Menu...enu.js

windows10-2004-x64

3

Cheat_Menu...enu.js

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    Cheat_Menu.rar
  • Size 25KB
  • Sample260802-vyv7wadc55
  • SHA256 0104a07d08fb95b0a9c5713aad5f3bc10e14da0aa63f50a3513bb6338456bbb9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryexecutionlinuxransomware

Malware Config

Targets

    • Target
      Cheat_Menu.rar
    • Size 25KB
    • SHA256 0104a07d08fb95b0a9c5713aad5f3bc10e14da0aa63f50a3513bb6338456bbb9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10

    • Executes dropped EXE

    behavioral1behavioral2
    • Target
      Cheat_Menu/MVPluginPatcher.exe
    • Size 37KB
    • SHA256 89edcd5d47333c299c086a5278ed3db20f7b6e471e849f92102b1ef6e42eecf4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral3behavioral4
    • Target
      Cheat_Menu/patchPlugins.sh
    • Size 513B
    • SHA256 4f876f0fc31c001b1f0f873c734b1d501f96948a20cb37244c99f10b9c80007b
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6behavioral7behavioral8
    • Target
      Cheat_Menu/plugins_patch.txt
    • Size 68B
    • SHA256 1f2d20474fb494af1e0c9fe2c9676c22a72e3625820d4e00a345886bf5b0f71d
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    ransomware
    behavioral10behavioral9
    • Target
      Cheat_Menu/www/js/plugins/Cheat_Menu.css
    • Size 970B
    • SHA256 f9a6000d16f11c00011d32014eadf5cedd49d02883b9c7b78bedc17276b992a9
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    executionransomware

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral11behavioral12
    • Target
      Cheat_Menu/www/js/plugins/Cheat_Menu.js
    • Size 57KB
    • SHA256 bb2a0708e9020f7101246c0a42242d888d37477b2b2a404baa0316ecc5db648c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral13behavioral14

MITRE ATT&CK Enterprise v16

Tasks