Analysis
- max time kernel
70s - max time network
88s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260513-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
20/08/2026, 05:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cheathub.exe
Resource
win10v2004-20260513-en
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
cheathub.exe
Resource
win10ltsc2021-20260513-en
2 signatures
900 seconds
Errors
Reason
Machine shutdown
General
- Target cheathub.exe
- Size 154.1MB
- Sample260820-gbd37as1ct
- SHA256 0d8f4215cc0cf2bdd3786c50a9e26fb9815551d1d1c63552b931ab7cd8e0714b
- MD5 a1c651d2cd5f609a4f8660ba1372df63
- SHA1 246ee50a906e59e552f1f688c4131633e8ce0bd4
- SHA512 29ddca96aa5f1fbbb6b5a82a1dfb6f07642955cc85619a5f5589f1138ab4dbc7deb2bbd961ce04b17c49cebfcab01f675d37b32f04aae5437df84dd52ef7da34
- SSDEEP 786432:B2LAA8Oa89TsG5YWV5OtsFGtatWbhsCrTG5mfOm5cuA0zm767EPV:cMA838JsHWEd2CvG8fOkZboPV
- TLSH T15A787D1163E81A45E67B8678D77382A1E6B1BC535711C1CF0094FA4A2F73BC2BA36376
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 cheathub.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeShutdownPrivilege 4532 cheathub.exe