retrac cheat[.]rar

Resubmissions

20/08/2026, 01:15

260820-bmldrazwgv10

20/08/2026, 01:12

260820-bkhj3scq5w10

20/08/2026, 01:10

260820-bjef2acq3t10

Sharing

Copy URL Twitter E-mail

General

Target
retrac cheat.rar
Size 363KB
Sample260820-bjef2acq3t
SHA256 3f80c900ac5fa2728d02edcc6eabba7041f9492aaf0819e44b471575c3bfd315
MD5 de29ea1a9fbbe907ffbef087c323f437
SHA1 0387b0749627440ae700a9a7b778f73322f189c6
SHA512 a8a6db1465a4369750614e48f1e7dda09b0c842114ba6ee670053647fd5075e730e93789238ed94e58bcdc5f5248f413838cc1d9d34dfd052c9c073678ff44b0
SSDEEP 6144:UVe3UV/IulnbvfluCW0rK3aUNAaCln318QgfAK/qewHOh3rf9MY:UV+A/5jluCW0e3leaqn315gfv/Xwq3r/
TLSH
T18B84237AA504198452321BF11A3AD74E2264C1EAB5D8DFB4C40D2EDEE53F2344BC9E8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Loader.exe

File Explorer

retrac cheat.rar

.rar 363KB
Loader.exe

.exe 368KB

retrac cheat.rar

SHA256 3f80c900ac5fa2728d02edcc6eabba7041f9492aaf0819e44b471575c3bfd315
MD5 de29ea1a9fbbe907ffbef087c323f437
SHA1 0387b0749627440ae700a9a7b778f73322f189c6
SHA512 a8a6db1465a4369750614e48f1e7dda09b0c842114ba6ee670053647fd5075e730e93789238ed94e58bcdc5f5248f413838cc1d9d34dfd052c9c073678ff44b0
SSDEEP 6144:UVe3UV/IulnbvfluCW0rK3aUNAaCln318QgfAK/qewHOh3rf9MY:UV+A/5jluCW0e3leaqn315gfv/Xwq3r/
TLSH
T18B84237AA504198452321BF11A3AD74E2264C1EAB5D8DFB4C40D2EDEE53F2344BC9E8E
MD5 SHA1 SHA512 SSDEEP TLSH

Loader.exe

SHA256 be8ffa2deeb1ad590f371dfc031c4701010de583a091b9e9ad81e5d421ebbee0
MD5 93b152ddba79f433c3a17fa907c01a06
SHA1 8cce14920662a7c2ffc3595bb625ef5e7603735a
SHA512 e85dbb45c4b40bd67b0594ddc6cb96f717ce98dab7c4a2147e42225e89fef1076b56a1303653c80209c42c03535df817e05735a7706096da0ce65c362aab6126
SSDEEP 6144:QwR3cLrvZBKCGfiRm/6nEVAQFXOhEwYRfZuy6MTI1Ng1NdiSKRa58z8SsD:QW3mkSRSFAQ4q14Jr7sdi1Ram
TLSH
T12984231453DF95A3D87578339E6642B44B3FBA9E4D86AB2363CC1DB8AB16784FD90003
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths