General
- Target BillysCheats-installer.exe
- Size 6.1MB
- Sample260909-2gacea1grg
- SHA256 8ee01aee8d59c0d135c85a0ab03cf0ec6d50be9232d1981690f6ca057e0e1d12
- MD5 933063a69dadcbf648308f176d795c56
- SHA1 3644f2c06be4e023c80c514b68f382a638b0f6be
- SHA512 66063a0519a25eb03f81adc1a487c87537f829d7d44bc57da2743cbb7e1406285e48777abeb165769c65233c200d7d1fa9e019cbd6b15132ec3af255ed2e2e3f
- SSDEEP 196608:rCCaVFhmAv8rbI8iftqYETLQ/+IOj+GD:rmp0r0nETLKEyGD
- TLSH T1F35633503580E8B5E4F36A361A714EF04D3E3E98B739C0CB4798B9F9DD515C0BA78A4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
BillysCheats-installer.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
BillysCheats-installer.exe
Resource
win11ltsc2024-20260709-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target BillysCheats-installer.exe
- Size 6.1MB
- SHA256 8ee01aee8d59c0d135c85a0ab03cf0ec6d50be9232d1981690f6ca057e0e1d12
- MD5 933063a69dadcbf648308f176d795c56
- SHA1 3644f2c06be4e023c80c514b68f382a638b0f6be
- SHA512 66063a0519a25eb03f81adc1a487c87537f829d7d44bc57da2743cbb7e1406285e48777abeb165769c65233c200d7d1fa9e019cbd6b15132ec3af255ed2e2e3f
- SSDEEP 196608:rCCaVFhmAv8rbI8iftqYETLQ/+IOj+GD:rmp0r0nETLKEyGD
- TLSH T1F35633503580E8B5E4F36A361A714EF04D3E3E98B739C0CB4798B9F9DD515C0BA78A4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Executes a VBScript file via the Windows Script Host.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
3PowerShell
1Visual Basic
1Windows Command Shell
1