Analysis
- max time kernel
149s - max time network
144s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
14/10/2026, 12:20
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
anticheat_update.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
anticheat_update.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
General
- Target anticheat_update.exe
- Size 5.2MB
- Sample261014-ph7cbacy6s
- SHA256 5cde94846e1e9c2e97d7c6e0b2ce506341f47ad411f305d6de5c4dbf21ccd3e8
- MD5 75350c9aa5a2102f915c4477e3835896
- SHA1 758a4eaeba937eff1b3e413610480244328751a1
- SHA512 cc55d507afe6d688ed777fbc7da89c26098be9920b691e6f5cb4e852fb3a7cb6323ff95a53057b89e320aeaeb9ad94b5f17cda752969f5396b12bb490902da4e
- SSDEEP 98304:0cawbhJExk8JsmUm3TAIaqvo6hY8CwQphmulimFQAT3aTOR8z+X70wyav5iRWDkp:T3ExBtUKayU8CwQfmul5QAT3ewmPw3eq
- TLSH T102462340F1C581BCC157D275885A8F2FE632F848270561DB33E0DB242FE2AD59FBA669
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Drops file in Drivers directory 3 IoCs
description ioc Process File opened for modification C:\Windows\System32\drivers\etc\hosts anticheat_update.exe File created C:\Windows\System32\drivers\etc\hosts.bak anticheat_update.exe File opened for modification C:\Windows\System32\drivers\etc\hosts.bak anticheat_update.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4352 anticheat_update.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4352 anticheat_update.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Windows\System32\drivers\etc\hosts
- Size 1KB
- SHA256 77bf929e9fcda2bdb8698f82856b1332bd5a50b822969b35bfd4d1b4b1dc322b
- MD5 9748ec0abe3c74680f9cd45608510b5e
- SHA1 4edac9ff772800f083079798fcf02b5575286316
- SHA512 26a15c0723426327162931d85be30c16aec976e0d2d67ff85c826df5e31ae0c69741337f3af9134edc41831bf0460384f899248fc7321542960adaaf5bac9da9
- TLSH T10F21BE750688956D26B346E5095CF02FE31AC1EFDA6B9D893D8E410BB7B231C1325601
- MD5 SHA1 SHA512 TLSH