Overview
overview
3Static
static
3Cheadleware.zip
windows10-2004-x64
1Cheadleware.zip
windows11-ltsc_2024-x64
1Cheadlewar...ypto.h
windows10-2004-x64
3Cheadlewar...ypto.h
windows11-ltsc_2024-x64
3Cheadlewar...iner.o
windows10-2004-x64
3Cheadlewar...iner.o
windows11-ltsc_2024-x64
3Cheadlewar...text.h
windows10-2004-x64
3Cheadlewar...text.h
windows11-ltsc_2024-x64
3Cheadlewar...tate.h
windows10-2004-x64
3Cheadlewar...tate.h
windows11-ltsc_2024-x64
3Cheadlewar...ract.h
windows10-2004-x64
3Cheadlewar...ract.h
windows11-ltsc_2024-x64
3Cheadlewar...xt.cpp
windows10-2004-x64
3Cheadlewar...xt.cpp
windows11-ltsc_2024-x64
3Cheadlewar...text.h
windows10-2004-x64
3Cheadlewar...text.h
windows11-ltsc_2024-x64
3Cheadlewar...ry.cpp
windows10-2004-x64
3Cheadlewar...ry.cpp
windows11-ltsc_2024-x64
3Cheadlewar...ntry.h
windows10-2004-x64
3Cheadlewar...ntry.h
windows11-ltsc_2024-x64
3Cheadlewar...itor.h
windows10-2004-x64
3Cheadlewar...itor.h
windows11-ltsc_2024-x64
3Cheadlewar...er.cpp
windows10-2004-x64
3Cheadlewar...er.cpp
windows11-ltsc_2024-x64
3Cheadlewar...pper.h
windows10-2004-x64
3Cheadlewar...pper.h
windows11-ltsc_2024-x64
3Cheadlewar...rt.cpp
windows10-2004-x64
3Cheadlewar...rt.cpp
windows11-ltsc_2024-x64
3Cheadlewar...port.h
windows10-2004-x64
3Cheadlewar...port.h
windows11-ltsc_2024-x64
3Cheadlewar...rt.cpp
windows10-2004-x64
3Cheadlewar...rt.cpp
windows11-ltsc_2024-x64
3General
- Target Cheadleware.zip
- Size 47.8MB
- Sample260814-vsnwlsxgnc
- SHA256 525b3cfc4e07eabcfcb6f5ddb64bf01bf5f9ef0b6a095b3f90e5bec72b591907
- MD5 cd5347fe9dd162fa67b1d81356366553
- SHA1 e8383bde223592954bf0e25c8f8010cd4070a390
- SHA512 7ada83775a10fbf875ea9de9e898915dc39addcde0b324226ad117c19c004fc19b0137b8a391a84f87ec67cca387cf601762135dfb7d282edc0a754b1971719d
- SSDEEP 786432:Z1wT/j6u1h9D7n1we2+nR1wT/j6u1h9D7n1we2+n4B1wT/j6u1h9D7n1we2+n/Y4:ZUXdRUXdCUXdLryA
- TLSH T198B7334DE8E18D93380350B066D155C2C39BEE209A5DB58BE0790FAD44265EFDF6AECC
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Cheadleware.zip
Resource
win10v2004-20260513-uk
Behavioral task
behavioral2
Sample
Cheadleware.zip
Resource
win11ltsc2024-20260709-uk
Behavioral task
behavioral3
Sample
Cheadleware/source/loader/transport_crypto.h
Resource
win10v2004-20260513-uk
Behavioral task
behavioral4
Sample
Cheadleware/source/loader/transport_crypto.h
Resource
win11ltsc2024-20260709-uk
Behavioral task
behavioral5
Sample
Cheadleware/source/original_binary/stage2-resource-container.o
Resource
win10v2004-20260513-uk
Behavioral task
behavioral6
Sample
Cheadleware/source/original_binary/stage2-resource-container.o
Resource
win11ltsc2024-20260709-uk
Behavioral task
behavioral7
Sample
Cheadleware/source/relay/payload_context.h
Resource
win10v2004-20260513-uk
Behavioral task
behavioral8
Sample
Cheadleware/source/relay/payload_context.h
Resource
win11ltsc2024-20260709-uk
Behavioral task
behavioral9
Sample
Cheadleware/source/relay/relay_attach_state.h
Resource
win10v2004-20260513-uk
Behavioral task
behavioral10
Sample
Cheadleware/source/relay/relay_attach_state.h
Resource
win11ltsc2024-20260709-uk
Behavioral task
behavioral11
Sample
Cheadleware/source/relay/relay_cleanup_contract.h
Resource
win10v2004-20260513-uk
Behavioral task
behavioral12
Sample
Cheadleware/source/relay/relay_cleanup_contract.h
Resource
win11ltsc2024-20260709-uk
Behavioral task
behavioral13
Sample
Cheadleware/source/relay/relay_context.cpp
Resource
win10v2004-20260513-uk
Behavioral task
behavioral14
Sample
Cheadleware/source/relay/relay_context.cpp
Resource
win11ltsc2024-20260709-uk
Behavioral task
behavioral15
Sample
Cheadleware/source/relay/relay_context.h
Resource
win10v2004-20260513-uk
Behavioral task
behavioral16
Sample
Cheadleware/source/relay/relay_context.h
Resource
win11ltsc2024-20260709-uk
Behavioral task
behavioral17
Sample
Cheadleware/source/relay/relay_entry.cpp
Resource
win10v2004-20260513-uk
Behavioral task
behavioral18
Sample
Cheadleware/source/relay/relay_entry.cpp
Resource
win11ltsc2024-20260709-uk
Behavioral task
behavioral19
Sample
Cheadleware/source/relay/relay_entry.h
Resource
win10v2004-20260513-uk
Behavioral task
behavioral20
Sample
Cheadleware/source/relay/relay_entry.h
Resource
win11ltsc2024-20260709-uk
Behavioral task
behavioral21
Sample
Cheadleware/source/relay/relay_lifetime_monitor.h
Resource
win10v2004-20260513-uk
Behavioral task
behavioral22
Sample
Cheadleware/source/relay/relay_lifetime_monitor.h
Resource
win11ltsc2024-20260710-uk
Behavioral task
behavioral23
Sample
Cheadleware/source/relay/relay_mapper.cpp
Resource
win10v2004-20260513-uk
Behavioral task
behavioral24
Sample
Cheadleware/source/relay/relay_mapper.cpp
Resource
win11ltsc2024-20260709-uk
Behavioral task
behavioral25
Sample
Cheadleware/source/relay/relay_mapper.h
Resource
win10v2004-20260513-uk
Behavioral task
behavioral26
Sample
Cheadleware/source/relay/relay_mapper.h
Resource
win11ltsc2024-20260709-uk
Behavioral task
behavioral27
Sample
Cheadleware/source/relay/relay_support.cpp
Resource
win10v2004-20260513-uk
Behavioral task
behavioral28
Sample
Cheadleware/source/relay/relay_support.cpp
Resource
win11ltsc2024-20260710-uk
Behavioral task
behavioral29
Sample
Cheadleware/source/relay/relay_support.h
Resource
win10v2004-20260513-uk
Behavioral task
behavioral30
Sample
Cheadleware/source/relay/relay_support.h
Resource
win11ltsc2024-20260709-uk
Behavioral task
behavioral31
Sample
Cheadleware/source/relay/relay_transport.cpp
Resource
win10v2004-20260513-uk
Behavioral task
behavioral32
Sample
Cheadleware/source/relay/relay_transport.cpp
Resource
win11ltsc2024-20260709-uk
Malware Config
Targets
-
- Target Cheadleware.zip
- Size 47.8MB
- SHA256 525b3cfc4e07eabcfcb6f5ddb64bf01bf5f9ef0b6a095b3f90e5bec72b591907
- MD5 cd5347fe9dd162fa67b1d81356366553
- SHA1 e8383bde223592954bf0e25c8f8010cd4070a390
- SHA512 7ada83775a10fbf875ea9de9e898915dc39addcde0b324226ad117c19c004fc19b0137b8a391a84f87ec67cca387cf601762135dfb7d282edc0a754b1971719d
- SSDEEP 786432:Z1wT/j6u1h9D7n1we2+nR1wT/j6u1h9D7n1we2+n4B1wT/j6u1h9D7n1we2+n/Y4:ZUXdRUXdCUXdLryA
- TLSH T198B7334DE8E18D93380350B066D155C2C39BEE209A5DB58BE0790FAD44265EFDF6AECC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Cheadleware/source/loader/transport_crypto.h
- Size 2KB
- SHA256 3b5f525376c8e7f5a9f86dcc86dbf23cf74594ab33df64e86e0e43cf528d75b6
- MD5 ab7ba5b83f4d626f7c73592e6b5aba6e
- SHA1 efd03c80d188205e157f88685bb75dccfd5c8e96
- SHA512 4fa519e9497c9780ffbd32032cbeecf6a7de83e9f6855fbd06eab0ad7ffb051cf3ad1cccd159eb5877b83e5ee26a329405148552f27a3e9494ee21593fe1529a
- TLSH T1D65157138C31FC1E8A43A8B2D1ED5D01A7996A42FBD2EBD372DF95542FCA1FAC114016
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Cheadleware/source/original_binary/stage2-resource-container.o
- Size 13.2MB
- SHA256 a4ba56f0827d8bb410ab864e302a328c16e1d6cc6f55504285465f2fbcf670cf
- MD5 180c9e64bc51a52f8bcef7c086589d54
- SHA1 6252bac579240cc94756ef275e8fcfa72f0aaaa5
- SHA512 2a2d8609d2c9ec9e33a86d069ee1bd0dbb0956d3a3ce5777fcae88fd778ea2a2afdebd142046a408e9a9f628186bd57007b15982ad7a90d6c0dc106669177292
- SSDEEP 196608:RsF6sEVKh1ktqEPf4u2pmOwtNZQCF3vN//f7t+3jd33L7aRM0VIJF73uvJ:RsNEV3q7c7tTF9/f7tSV3/WM0VIXTuR
- TLSH T180D612DA65D4927DC4408038E14546FAF0C5BC8C4CB9992AFFC759167A30CAAC8FAF76
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Cheadleware/source/relay/payload_context.h
- Size 704B
- SHA256 ee3ab1267a57e058152f2d6cd3c7985d6539948e4e03ea3e4f2140337ae46a4e
- MD5 95b8c74a989ab5894fc1ecd574760ad8
- SHA1 cb8481b78350c9e58d9514f6f1576d074ea7cfff
- SHA512 a140de1b744d13dd53b51b4eb9e1cad09fc7e339282b30f7492bac979a36c31adf1c3990362647676f378f119a33eafbb25e267d0916c203beb858f8ac1b4102
- TLSH T176017D28A945F50049929A71539CBC017BC41663EC7B8C7B709C834E6FCA3700AD8280
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Cheadleware/source/relay/relay_attach_state.h
- Size 1KB
- SHA256 7f6aef212406dde95dcd9bf1f593f8b7a4427a4ce36e07fdb37f032c82255c7e
- MD5 b74d34806dbbff06f3b2926f6b26fc3c
- SHA1 d865014e50dca6cc4f12ba372a7d1f1f170651fd
- SHA512 23036486197afb963d705889e8fd4d8f9c1a4fbb3ac22d0b69df2ee7327bd007e49ec59535f38283a76f7d3b7f2cec5b9336492c760ae0612c0c9bf84e231340
- TLSH T122213D6179F1450A68E30B12D22D98741C46F6673FBA62EAF0BE11944F1DC4FA8FC935
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Cheadleware/source/relay/relay_cleanup_contract.h
- Size 829B
- SHA256 502bbc642f496ff0de1b7be188da622cdebaf6d854ebc22c80bd308a883925ee
- MD5 eafd82603abaefff84b847ebc3ad7247
- SHA1 3886fe299887fae3dd94a1e7355c11d85f7e8eb9
- SHA512 eea11503e37cea21595159e2b39c5003707f5852a9f223e5c03b70469be11c437bad3d6f5cdf1e42397b461fee05e7228574c978b40a1270cddd73d7377c2148
- TLSH T10B016D44BEA29836D1078867868F403A7A44EA47356E60E5B4FC42611F0D4FEE3B95A2
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Cheadleware/source/relay/relay_context.cpp
- Size 1KB
- SHA256 d87ea49cf1af58dbd15b2a48ed4b1604cfdf8e9c4f6a0cc4a27e5d64d075a31f
- MD5 19bb3d7e917bd40f80b1553ad3f6fbe7
- SHA1 876135a525bb82989f17743f6444e69819302e40
- SHA512 219c497bc91a4d2d1c3b31c14312d7004d2702b03992dcb82e5bbfd789b8e64dea8680f6eee4f0d9ef35564c50a8192ea9ac306ea64b00aaaf4feae4dd6ad210
- TLSH T12F31CFD55462352224E7DD366BEEB1B0B3C61013D9DDEC43BDAC03207FC11B8A994286
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Cheadleware/source/relay/relay_context.h
- Size 886B
- SHA256 6edfa3f2432f768d6e255ee20615a1f0b992024f72e3c30885d9dd658c96a675
- MD5 2b89301cdf132a00b85a330c6e9f7461
- SHA1 1ab3a140fe8842489fa4109f5d5841c12e1211de
- SHA512 5aa2f5dbcf4c583229c324a04bde3e99d10dced33dd3a3199b8aff70c661f9d37f8eb289ebf44bd6026e0b49cfd4c3afd923b89159a5c4a11223bf07b3e31ece
- TLSH T19211ABD6C878F0519C6B9C3222CA34D0A7C81283E57ADEDB338C82887FCA47918812C3
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Cheadleware/source/relay/relay_entry.cpp
- Size 16KB
- SHA256 b8321a416b5eb197f06e281b777f6a0f783969b23b5d40fcfd1bebe13e525588
- MD5 8a34b6f0ef2a0a636c9ff7a0588026d6
- SHA1 2d7c296379f00aab2caf1de401bc4a81a105dc78
- SHA512 dc76da45dc3a9f1447cca9a060cff679128aba3545b569197938e13b58617ece95db840e6fbae0dd96bde6337e32c7167844b48fc9030e4a801352e9b4b28348
- SSDEEP 192:Dlke8qZCmlD5cqThp79Oztj+bGgxnwUftJhZqXHdQryZTtkVrbBgMheBTtSVdMIi:Zmi636VvMBr3PtO2mZfR/ykd1o
- TLSH T13E7273C9E9E3940314B2963D47DFE870A728A803795DDA99FFED4340EFC213892A5316
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Cheadleware/source/relay/relay_entry.h
- Size 964B
- SHA256 9998898a0832ca97bc95339209897ffe1ba12b9b6fa7f77ab6c1da899992247c
- MD5 70d0920068a5d962705acb9e73b551b8
- SHA1 a8dbc9821b6e2d8160a858189677d658be03098c
- SHA512 e67f311bf3fc750cb9c2369a7c9e44f740174a97b54441af7f7a158ad5137ef3360c1ef586a0a4a5464285ca4ad291f34150a1efbb7023f1c98c1e297c1a12f7
- TLSH T123119CD5D8FB7653022B412DC6C47104AE988A2B264FF520BB7C93B16F8906DE2B8D52
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Cheadleware/source/relay/relay_lifetime_monitor.h
- Size 2KB
- SHA256 db1dde354d325cb9793cdcf4699959065c58bb23bf4257ca919d8dd579966b51
- MD5 9bf8f6339c2f6451e31706d6b8cf928b
- SHA1 4938a328374e2971208676bd407b8f2cea87965b
- SHA512 1647097b32816bc1b2ab53514274191614a1ad4c170391def4cfe190941605a011bb611b0ac06d239384bbb6cb06748c7132c75080cc2b68066f69fa61a559aa
- TLSH T1BA51ED920DF2A4166C61712696DDE4B0BE9535433E86DB94BFAEC3208F0183CB1BC11D
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Cheadleware/source/relay/relay_mapper.cpp
- Size 28KB
- SHA256 712d4685f34cff4d2a5cdd062792b6be0c134ce637539d85e4718d10f6cba2ee
- MD5 cf52ec94b614efa4e1a67a6585694d0d
- SHA1 2bbb9350a4f6ea5fecf3411c268fb3c59a800133
- SHA512 530e21c1bd244cc365867cd4fc9c279aae5233c6f1e1cdde205b4f97b15f292f93a2acbd61d7b2064af2f5bcf9928dc35089b76d9a67cf46e198501afe7ac09a
- SSDEEP 384:2VJDNBcCFqcuhspU7rwlTs0r1dQIhxOMv+x0JgwRVLev+QHw:aqcuhspC0r1dp/vZJgv+R
- TLSH T19BD2338998A33403589212BD2BCF7020D765616378D9DA50FEBCA314BF8A2BDD571F1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Cheadleware/source/relay/relay_mapper.h
- Size 1KB
- SHA256 7b60d4a61fc2249e8601a7ecee9604a4820607b00c83a0d29fc0d0259ff731a2
- MD5 f3c5629006498863a08bc54fe14fcedb
- SHA1 cbc0a0b032c1b81f89253df4196442af4247e8ec
- SHA512 05c7f57171552b0bf45b86714e7dc0b438775b9bac9f6e14e720bbbe0c27d1f19bf558d80a8ed635ec9519795590fa1eeed8b9b4495e7ec8a1e3b5e29246e396
- TLSH T108116A44E97BA603A85789BD57E9603083A572F2F481E6B35BEF120D2DC3A6D8301308
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Cheadleware/source/relay/relay_support.cpp
- Size 11KB
- SHA256 ae0132e30986bbe9a6abebc23fd2402df233b31bed8a95af2623211690cd526c
- MD5 eba5e3195c8db9f9d4a97e9374a013fd
- SHA1 544c2b12b0e1997ecf962e7cbd258ba6db34f964
- SHA512 a10cf8afba1cff4a95832977b37bc0694ce99cdcbf8b81523c938188b65c50d34578d0dfdb9fb64784dff9ba93e48522df969b9d9931f2c051893614f687bfc5
- SSDEEP 192:LVOiDskie+f5QzVGQ0QZpDQXR1Q3lnEQQMQwlIO1q1XQlMWQJZ9RniQ6Z9hiQwjq:Z4nfyuAFcZ9RMZ98G
- TLSH T19242FA8418E3781319A652BD8BDFB074E2954427BDD9DD40F9AD63A0AF43078D262A2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Cheadleware/source/relay/relay_support.h
- Size 3KB
- SHA256 45c1c982b59e7ad39d38a3425c3db37a34013b4fcec5ce71e43022d19a7fca07
- MD5 7190f0e1657b182d94c8e6dcb375f78d
- SHA1 96220f3c0d42213f60e79a4fa34451f94e0058fc
- SHA512 8ca3f7e8642b3216f66f4f7c69e4e746a654d2a8fe659e639148df332dc9bb6ad7d6d85d1350fef9b1f564c4a532eac63e5760d39e265d603c4ebe51ae29b47d
- TLSH T1D661FD030972349328E4C8B1C78E5830C2746172F9F0FD43B9EF77604F8A6A9D561275
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target Cheadleware/source/relay/relay_transport.cpp
- Size 5KB
- SHA256 4e8d7330135eabe91d5951802311d4907ab99cb55b0649858e1d6875b467888e
- MD5 f4f1635d13f5bd5ed25d3d99f64e8578
- SHA1 4539b8f07532b58df989acb415de65a728bb3c0d
- SHA512 221e54aabe3594356c3bff1aed8934b9be367a3d4edb40dd497a0776186d72f1e39dc10b251b04868a586a1195853b02a20084dec5fa432a59ddfa6b07fb8980
- SSDEEP 96:4tZ0o967jIj0sghnrRHlCWQWvfmhQuv8WIFepyFYbaiuQwu:4fM/M0senrXCefAQdW2BFYmiuQN
- TLSH T1D3B1F0A5E8D37C23A133843AD7DE901597288543B04B9E46BB5C0328BFCC31ED7A4667
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10