General
- Target madcausebad dsc.gg fncheatz.rar
- Size 1.8MB
- Sample261024-d4tskahv8m
- SHA256 fc2f5ad783647fa2ece43b9de582bb519214d986032760002764f986516fac4b
- MD5 efaeda3bcb7deda7b12f20bcbea23a24
- SHA1 c12e19479c79ec886066d9234359ea0807d1ad13
- SHA512 c2bbb0f654fd0cdd1ced1691d9a97511cb1303a040e4595ba7259fba3ce351fb16995acfbd018e76a97345dba947bb8b637615576e7eae825463bb8e5fbb1aac
- SSDEEP 49152:jLOuiwA90Jbp9+8pDITykdkPtp6LQ2uidpyuJS82:u7v0nnpDJiQ2uupyuD2
- TLSH T13195331910BC84719BB7D413435B1A137965E8B4385EA63733A2CE7E1FEA9AB5333071
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
madcausebad cracked.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
madcausebad cracked.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target madcausebad cracked.exe
- Size 3.8MB
- SHA256 449438b41b213155444d0da11c270dea561322d89d06b181a8ad09a86da81bd8
- MD5 0c6ada7da5c25a7b346b407d58730f75
- SHA1 0c0b0033c9c7166c3d0eb09c0ec3abc74419f2f3
- SHA512 a539c4de7745859aba002a2ccece46199fcdabfd26c7f06e408bc1d85f34811f60bc3fb8d4140066cebee17332f2b8d0b191918374c9f78c04868af8c7c79fb8
- SSDEEP 49152:oXwV0MMbHgy4I9YnDvuHJZgkD0P4fITbl9nfq9smbYlo:aUBvIJ/Dy2IT5tbmbYl
- TLSH T17E06E046636EC1E8D92A813C54B66BC7B6F13D3DD3108FEF22D04CA81E9B6D15AB56C0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1