General
- Target jaffacakes118_GrandTheftAuto IV Performance Hack.exe
- Size 5.4MB
- Sample260910-cxtnjstglh
- SHA256 b9caeb9d073333a969bc30888ed8d82a16bd4a34aaa5934b4f61cb25a36a4f72
- MD5 78e8c3d26e373e428288e53e3a04cd52
- SHA1 5873d11c04120c653cb07d616323cc83b94ac972
- SHA512 3a0eca0470749f32ba6591599599ccd2570db2ad3b27df97f413ab0d69abb27d98227ce5f16254937de52485c0076f6609c76eb04d2f6fb1d70661e23f65f161
- SSDEEP 98304:6czMNOFCCwocCJ7Ol8GqBkLX6jdw2EgyzSLLAmb75mwSzIdI81YNhOwlkMF3RzjT:DzMMZHJ7Ol84LX6u2ozSLhb75N2Idbot
- TLSH T17B46331399B28579F77923FC9591796EF760FB88CA8A1CC303C796C02C995F396B0246
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
jaffacakes118_GrandTheftAuto IV Performance Hack.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target jaffacakes118_GrandTheftAuto IV Performance Hack.exe
- Size 5.4MB
- SHA256 b9caeb9d073333a969bc30888ed8d82a16bd4a34aaa5934b4f61cb25a36a4f72
- MD5 78e8c3d26e373e428288e53e3a04cd52
- SHA1 5873d11c04120c653cb07d616323cc83b94ac972
- SHA512 3a0eca0470749f32ba6591599599ccd2570db2ad3b27df97f413ab0d69abb27d98227ce5f16254937de52485c0076f6609c76eb04d2f6fb1d70661e23f65f161
- SSDEEP 98304:6czMNOFCCwocCJ7Ol8GqBkLX6jdw2EgyzSLLAmb75mwSzIdI81YNhOwlkMF3RzjT:DzMMZHJ7Ol84LX6u2ozSLhb75N2Idbot
- TLSH T17B46331399B28579F77923FC9591796EF760FB88CA8A1CC303C796C02C995F396B0246
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detected Nirsoft tools
Free utilities often used by attackers which can steal passwords, product keys, etc.
-
NirSoft MailPassView
Password recovery tool for various email clients
-
Executes dropped EXE
-
Accesses Microsoft Outlook accounts
-
Suspicious use of SetThreadContext