General
- Target Noncheats.exe
- Size 657KB
- Sample260828-b24tmsssav
- SHA256 a778ef6738b5bd41be55286f076f07c80bd0b063fe09e6c490a3604bfaacd9cd
- MD5 5711c35781b00b0b5c531f7bac7ab153
- SHA1 626d19b5507d01d549cb2958c6faf83294545b67
- SHA512 722811845bd2efbf603b62eac60b90df86cdadcc227efb73db736eb68d947a2437cada1a899ba9ef73da4eb28aa22c01522ab122c2cf08bcc5da87ccc085c20d
- SSDEEP 12288:kmAEYH9rqPLRcg9l0l38nqDXsL9ktHYswjQDegaRKIZx94tHOy:kPEQrqPtcg9l8AqDX3Ysw0DloKIZ0wy
- TLSH T1ACE47C2DFA4803B4E1A7C5B8CA438463F772784943759EF717E1D9A14F266D0AA3FA10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Noncheats.exe
Resource
win10ltsc2021-20260513-es
14 signatures
900 seconds
Behavioral task
behavioral2
Sample
Noncheats.exe
Resource
win10v2004-20260513-es
13 signatures
900 seconds
Behavioral task
behavioral3
Sample
Noncheats.exe
Resource
win11-20260513-es
13 signatures
900 seconds
Behavioral task
behavioral4
Sample
Noncheats.exe
Resource
win11ltsc2024-20260709-es
18 signatures
900 seconds
Malware Config
Targets
-
- Target Noncheats.exe
- Size 657KB
- SHA256 a778ef6738b5bd41be55286f076f07c80bd0b063fe09e6c490a3604bfaacd9cd
- MD5 5711c35781b00b0b5c531f7bac7ab153
- SHA1 626d19b5507d01d549cb2958c6faf83294545b67
- SHA512 722811845bd2efbf603b62eac60b90df86cdadcc227efb73db736eb68d947a2437cada1a899ba9ef73da4eb28aa22c01522ab122c2cf08bcc5da87ccc085c20d
- SSDEEP 12288:kmAEYH9rqPLRcg9l0l38nqDXsL9ktHYswjQDegaRKIZx94tHOy:kPEQrqPtcg9l8AqDX3Ysw0DloKIZ0wy
- TLSH T1ACE47C2DFA4803B4E1A7C5B8CA438463F772784943759EF717E1D9A14F266D0AA3FA10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects DarkSideRAT
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of SetThreadContext