General
- Target Cheat Menu.exe
- Size 297KB
- Sample260822-eqrxgs1bmg
- SHA256 74135cc15d5309e98707bbe309f288e787998869c51404a4ab81f75c7879547c
Score
7/10
Malware Config
Targets
-
- Target Cheat Menu.exe
- Size 297KB
- SHA256 74135cc15d5309e98707bbe309f288e787998869c51404a4ab81f75c7879547c
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Defense Evasion
Modify Registry
1Obfuscated Files or Information
1Command Obfuscation
1