f02bfbc5113fecdc4920e35f721357df798101e0cdc7b0b6f3229a579a34ddcc

Sharing

Copy URL Twitter E-mail

General

Target
eft_hack.zip
Size 9.6MB
Sample261017-arma6scd25
SHA256 f02bfbc5113fecdc4920e35f721357df798101e0cdc7b0b6f3229a579a34ddcc
MD5 448eddc48573f5c6e2153db877cd495b
SHA1 34b5c909d5f8e8eee2f47090b1a069ee75baebd9
SHA512 712c5525d690509b36353496bd822b6a569b18a47af9f0d6f185c97b0b8a1351b9c1de90f7c0ada75b1ea453533e14afaa5f57d704a88c0f08808f0cacdf075f
SSDEEP 196608:d6Ea6dJavTBs1B/Myw+XSUHrwzs2IZBTztTemb6t:tTavTEMICRsRTJem2
TLSH
T13FA6332E944021CAB0D71F9999D54F101E3EB0566EF6E9412B9C9FFE1D8C498FAF9203
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  escape-from-tarkov-cheat-undetected-with-aimbot-esp-wallhack-radar-hack-and-more-main/Loader.exe
- Size 8.0MB
- SHA256 6c2446f06869a50df82165dbbc78527186cc70e8ebb50c48634de0ab9057c00a
- MD5 53648dee77c997e3665a8c3add00eeaa
- SHA1 dfeedc4eae6c517ef1286bd041cc36de8a608f46
- SHA512 598afff16262ee75f9866a62a124407c6ef5dff8c577371ea79ea8817805be998ba6d0553497400312c1cf5c0106772696727f312bd55ac99a8c23dd6e138f65
- SSDEEP 98304:V3T2h9PPeJzgg3ty1qrMGUjEBoSMeduU8gsHZVY/YK2:VjigJMg3E1qwQFM/U8gsHCYX
- TLSH
  T1FC867C43EC9159E9C1A9A33089A79253BB71BC481B3223D72B90F7392F76BD06E75350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

credential_access discovery execution spyware stealer
- Credentials from Password Stores: Windows Credential Manager
  Suspicious access to Credentials History.
  credential_access stealer
- Executes dropped EXE
- Unsecured Credentials: Credentials In Files
  Steal credentials from unsecured files.
  credential_access stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1 behavioral2
- Target
  escape-from-tarkov-cheat-undetected-with-aimbot-esp-wallhack-radar-hack-and-more-main/brokeradaptor.dll
- Size 135KB
- SHA256 4d725b105705260065093273cc93b5db7f57afbe05140125fba0856fc46ec1b9
- MD5 acb20911248011efec85b6a86a63f76a
- SHA1 e8fb7ea1b5d6ef8dfd3a637456909b0a72008825
- SHA512 a4f2b9b502f481ba6a559f896a232521bc111c1d24d4307b5f96edb98cb108f7ef490bca1d2ea60654aec58a4dc9edda1b3645baa99eb08a9997842f1b7c5098
- SSDEEP 3072:Zms85B/6AXcctyvm6MAjUN+nmpLyG1GPA:C5V9M3MA4QmNyGwo
- TLSH
  T119D33A123A16C177D49E53B4782DBB6E92696968CF7002C777D89F6D0D340E32E32A1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  escape-from-tarkov-cheat-undetected-with-aimbot-esp-wallhack-radar-hack-and-more-main/irmfmodulewin32.dll
- Size 5.7MB
- SHA256 2a1ceca155e85ad7430a5fc100b9fd5b79873e61ed13a2123b8287c27b9579a1
- MD5 c048c29dd017beda7f54607f9e416353
- SHA1 e0dba3316c85acd9662629f2c7e391dc7846275f
- SHA512 c4bb6cfecd58759a556071db1034e34ae77bbece70176360d782d5fa27e83f1284cbb05cd1a96a76827361894313844b7d12d8539f4021993ad0350cbcc4a71a
- SSDEEP 98304:Mpmkl7uAEuvs0UFD5VyU66URkLC8Ct81Eae1JqI3YL8SFlWC2nCArWQY14XJcvwz:wl7rEuXUlBikLC8Cy1Eae1JqI3YL8Spq
- TLSH
  T1F7563A32B70DC52BE45D42F6792C5A974448BA7A07A148C3F7806F9A34F60E36636F27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  escape-from-tarkov-cheat-undetected-with-aimbot-esp-wallhack-radar-hack-and-more-main/platforms/qwindows.dll
- Size 1.4MB
- SHA256 02b794c8b4158c258ad0c3d8ff69ba30bffe244d2239d07122f8bcddf42215ed
- MD5 2d08d996a453c97af0a94cf490015f1f
- SHA1 082ba4e232b53ced8d5672dfcf3e051573049d3b
- SHA512 4102039aa8602b32222456572288f64f09c2a7e9b7eff50f85d2d82c497120a58e39aaeedfade3248787abfca6815478dce8d8a64285f0077a35da317244dc7a
- SSDEEP 24576:F6YD7Po3twR8Git2eZalxSsF1fAPLJEZxB7BA:AYPPo3CRotmlxSsQPLJEA
- TLSH
  T18D658D57A36542A4C2ABC23DC65B8B07D6B1700503319BDF01A98E593F23BE3277EB56
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  escape-from-tarkov-cheat-undetected-with-aimbot-esp-wallhack-radar-hack-and-more-main/updater/bdfilters.dll
- Size 4.1MB
- SHA256 9cbc29696ad2d582e251bf9c4be5cce618753fa43551d2474e1ae5cc5e1245e5
- MD5 ed730387fdcd684b756601b863c47417
- SHA1 c49ed6d0d46facf4ceaeb21f5d6bfdf9e3587fde
- SHA512 e32df727799d33922c6e92f94a7bdb0bc2772d6a6636d15e285d94d3ae4661062e5bc89ec3546b76ec853398f88d972f461327ef687f89093acf1096560d5c3f
- SSDEEP 98304:Xl4qYuQxqYfHYosUiJovT7DBmmhjSF5og3Vk9O0KChvvvveo:XuqYuQxqYfHYosUiJoviVKvvvvJ
- TLSH
  T10B167DC3E6FF52E0D4551874203FB92BA6346B0A810CE6A2F1D56F1AFC377825AA7345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  escape-from-tarkov-cheat-undetected-with-aimbot-esp-wallhack-radar-hack-and-more-main/x86/QtCore4.dll
- Size 2.7MB
- SHA256 bc097cc75e9d0771cedeb46efae5e574d0fb5b9cf22750504f817a3590af0541
- MD5 be3317d66646acc0bcb5dda1198db9b5
- SHA1 bde91229d26afe7861db4522dcfa8e1b6fa68a84
- SHA512 fd6aaf3383dc3e67635c24826a43ee03abc5d6ffd07a9214939f9fa5047eafc8b0d3e0083a3a633dcc80f1c395b66362d1800860c9575bfd4004f18573840978
- SSDEEP 49152:oxbwz+A9MHaJVHOsbbWOWXzzULQoAnqagHWL1hp0UnxGJsv6tWKFdu9ChTTLyvLm:4bwz+n6JVHNbb1WDnvgHWL1hp0UnxGJ/
- TLSH
  T13AD56C15EE4B50B3DCBB4E70D03FB27E4A92AD119030999FC64D6D09DA376A0B91F34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  escape-from-tarkov-cheat-undetected-with-aimbot-esp-wallhack-radar-hack-and-more-main/x86/libgcc_s_dw2-1.dll
- Size 42KB
- SHA256 b35f2a8f4c8f1833f3cdec20739c58e295758ce22021d03d4335043148bd7610
- MD5 c4b4409f186da70fcf2bcc60d5f05489
- SHA1 056663c9fd2851cd64f39d882f6758e7a987bd42
- SHA512 cdcb945a82a0304e4d7cfc9ae9d7e5a5e81d4e3025e982494c87c283f6fac542181e9e1e3028456b9b0b5b6279990cb3e1a50f9df0f6e707c70fa0e23c7a808c
- SSDEEP 768:sZ1l+WCdhTcpKn+CwZoyf/dadEU9mRWtyTN:41l+WGhIKn+CQ7EyW0TN
- TLSH
  T146132A46AEB1D47BC89C2378D09F3DE949E5ACE9587108837F5E58384B221D0F91E62F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  escape-from-tarkov-cheat-undetected-with-aimbot-esp-wallhack-radar-hack-and-more-main/x86/mingwm10.dll
- Size 11KB
- SHA256 56a59dae638d9bb45ce729a5d6fdfb0ecbe88b37047e4d6d20dbdef1fc90bd72
- MD5 dbda60d92e774b4acb3b1cd71f909426
- SHA1 66bfe06a16025f574323a0ce64dcc7c8216eb56c
- SHA512 993a1f4af21cd5e13c3b8059cf483b10a58beb0d1777703ea07e9dcb5e7f681fa774e770abe9b6b4ca66b348997da0218d0ff67f18fcca1b3ca1ece2551d965a
- SSDEEP 96:ahfuHOIHxyOPLrHU4D+wdzpHvqsKZKnKTBKVhKRHK2FoSK8KcfK5uKxGKlJKHItQ:iuHOIE8rHI6RJyLTR24GEv
- TLSH
  T1CD32BDE1FDC65DD7EA20237C9AE69666363CF9E087438B178520A8361F52BC13ED4206
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16