9826a1c7c976332cbcc3fb92bc13779b80db7eab7a1e365b936d876cbff75a6c

General

Target
Cheat_Engine_7.6.6.7z
Size 15.4MB
Sample260808-a3y44szsew
SHA256 9826a1c7c976332cbcc3fb92bc13779b80db7eab7a1e365b936d876cbff75a6c
MD5 0d280394c84f276e327f770b4081480b
SHA1 734e5b3cf45d9d07615ff650c287ea01da5242e5
SHA512 e62294e8e839e3ee0b117cfbf4ebba458110c6301b442e2edfdacb597146002188dbd735fd8473d2731f941c9a0e33695eb46448daf58303b70be49172817c34
SSDEEP 393216:ffmTmKRXF6ub0fzL6Pq7FtloTcxCWxGNY3KmB:WKKdF64OzL6KFaTWUY3KmB
TLSH
T13EF633393DD7C4FC12E8EE3B94477AE2FD806764B8951183EAD4B8A3E1F0968E1D0651
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Cheat_Engine_7.6.6.7z
- Size 15.4MB
- SHA256 9826a1c7c976332cbcc3fb92bc13779b80db7eab7a1e365b936d876cbff75a6c
- MD5 0d280394c84f276e327f770b4081480b
- SHA1 734e5b3cf45d9d07615ff650c287ea01da5242e5
- SHA512 e62294e8e839e3ee0b117cfbf4ebba458110c6301b442e2edfdacb597146002188dbd735fd8473d2731f941c9a0e33695eb46448daf58303b70be49172817c34
- SSDEEP 393216:ffmTmKRXF6ub0fzL6Pq7FtloTcxCWxGNY3KmB:WKKdF64OzL6KFaTWUY3KmB
- TLSH
  T13EF633393DD7C4FC12E8EE3B94477AE2FD806764B8951183EAD4B8A3E1F0968E1D0651
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery persistence
- Boot or Logon Autostart Execution: Port Monitors
  Adversaries may use port monitors to run an adversary supplied DLL during system boot for persistence or privilege escalation.
  persistence
- Boot or Logon Autostart Execution: Print Processors
  Adversaries may abuse print processors to run malicious DLLs during system boot for persistence and/or privilege escalation.
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  Setup/Cheat Engine 7.6.6 Repack & Portable.exe
- Size 15.5MB
- SHA256 097026c75a669bf27bfdf78fe2441e4cfbd05ed2acccac52e2c0fe9870024caa
- MD5 0343a9856afc0cf2e605a685c005147b
- SHA1 be7da4b53ce373854bcbd0e27fff65dab5d0eeff
- SHA512 42e626e836a0cef0f350dbf4518d847b7369e1b2c90ee26a749ff1cd190d29a7f963a169eef6771a61d151777d4d8c21efe322b2af92c746e4289ac7fcca5c09
- SSDEEP 393216:EK7JHZrkGLrc2qFodCfDaHQDfTwT9oPI5ymjsp:thZwGLrnoodC+HCAo8ymjsp
- TLSH
  T1B5F633267FC3C4FCE1A89E3A8802B5E1FD41767468E51093EEF4E95F91F4998A0F0A51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral3 behavioral4