effef90d7287341943ae2608969dd4b61202b75b5c7813ffa13ca2a645449934

Login
Reports

Overview

overview

Static

static

CheatPract....1.rar

windows11-21h2-x64

CheatPract...ed.dll

windows11-21h2-x64

CheatPract...1d.dll

windows11-21h2-x64

CheatPract...0d.dll

windows11-21h2-x64

CheatPract...t.json

windows11-21h2-x64

CheatPract...es.dll

windows11-21h2-x64

CheatPract...es.xml

windows11-21h2-x64

CheatPract...el.dll

windows11-21h2-x64

CheatPract...el.xml

windows11-21h2-x64

CheatPract...ec.exe

windows11-21h2-x64

CheatPract...rs.dll

windows11-21h2-x64

CheatPract...rs.xml

windows11-21h2-x64

CheatPract...og.dll

windows11-21h2-x64

CheatPract...og.xml

windows11-21h2-x64

CheatPract...ry.dll

windows11-21h2-x64

CheatPract...ry.xml

windows11-21h2-x64

CheatPract...rs.dll

windows11-21h2-x64

CheatPract...rs.xml

windows11-21h2-x64

CheatPract...fe.dll

windows11-21h2-x64

CheatPract...fe.xml

windows11-21h2-x64

CheatPract...ws.dll

windows11-21h2-x64

CheatPract...ws.xml

windows11-21h2-x64

CheatPract...er.dll

windows11-21h2-x64

CheatPract...er.xml

windows11-21h2-x64

CheatPract...eb.dll

windows11-21h2-x64

CheatPract...eb.xml

windows11-21h2-x64

CheatPract...on.dll

windows11-21h2-x64

CheatPract...on.xml

windows11-21h2-x64

CheatPract...ns.dll

windows11-21h2-x64

CheatPract...ns.xml

windows11-21h2-x64

CheatPract...le.dll

windows11-21h2-x64

CheatPract...le.xml

windows11-21h2-x64

Analysis

user interaction
yes
max time kernel
119s
max time network
97s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
24/10/2026, 12:42

Sharing

Copy URL Twitter E-mail

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

CheatPractice1.0.4.1.rar

Resource

win11-20260911-en

windows11-21h2-x64

3 signatures

120 seconds

Behavioral task

behavioral2

Sample

CheatPractice1.0.4.1/Compiler/ucrtbased.dll

Resource

win11-20260911-en

windows11-21h2-x64

0 signatures

120 seconds

Behavioral task

behavioral3

Sample

CheatPractice1.0.4.1/Compiler/vcruntime140_1d.dll

Resource

win11-20260911-en

windows11-21h2-x64

0 signatures

120 seconds

Behavioral task

behavioral4

Sample

CheatPractice1.0.4.1/Compiler/vcruntime140d.dll

Resource

win11-20260911-en

windows11-21h2-x64

0 signatures

120 seconds

Behavioral task

behavioral5

Sample

CheatPractice1.0.4.1/HardCheat.json

Resource

win11-20260911-en

windows11-21h2-x64

4 signatures

120 seconds

execution

Behavioral task

behavioral6

Sample

CheatPractice1.0.4.1/Microsoft.Bcl.AsyncInterfaces.dll

Resource

win11-20260911-en

windows11-21h2-x64

0 signatures

120 seconds

Behavioral task

behavioral7

Sample

CheatPractice1.0.4.1/Microsoft.Bcl.AsyncInterfaces.xml

Resource

win11-20260911-en

windows11-21h2-x64

9 signatures

120 seconds

adware discovery spyware

Behavioral task

behavioral8

Sample

CheatPractice1.0.4.1/Pastel.dll

Resource

win11-20260911-en

windows11-21h2-x64

0 signatures

120 seconds

Behavioral task

behavioral9

Sample

CheatPractice1.0.4.1/Pastel.xml

Resource

win11-20260911-en

windows11-21h2-x64

9 signatures

120 seconds

adware discovery spyware

Behavioral task

behavioral10

Sample

CheatPractice1.0.4.1/PsExec.exe

Resource

win11-20260911-en

windows11-21h2-x64

1 signatures

120 seconds

discovery

Behavioral task

behavioral11

Sample

CheatPractice1.0.4.1/System.Buffers.dll

Resource

win11-20260911-en

windows11-21h2-x64

0 signatures

120 seconds

Behavioral task

behavioral12

Sample

CheatPractice1.0.4.1/System.Buffers.xml

Resource

win11-20260911-en

windows11-21h2-x64

9 signatures

120 seconds

adware discovery spyware

Behavioral task

behavioral13

Sample

CheatPractice1.0.4.1/System.Diagnostics.EventLog.dll

Resource

win11-20260911-en

windows11-21h2-x64

0 signatures

120 seconds

Behavioral task

behavioral14

Sample

CheatPractice1.0.4.1/System.Diagnostics.EventLog.xml

Resource

win11-20260911-en

windows11-21h2-x64

9 signatures

120 seconds

adware discovery spyware

Behavioral task

behavioral15

Sample

CheatPractice1.0.4.1/System.Memory.dll

Resource

win11-20260911-en

windows11-21h2-x64

0 signatures

120 seconds

Behavioral task

behavioral16

Sample

CheatPractice1.0.4.1/System.Memory.xml

Resource

win11-20260911-en

windows11-21h2-x64

9 signatures

120 seconds

adware discovery spyware

Behavioral task

behavioral17

Sample

CheatPractice1.0.4.1/System.Numerics.Vectors.dll

Resource

win11-20260911-en

windows11-21h2-x64

0 signatures

120 seconds

Behavioral task

behavioral18

Sample

CheatPractice1.0.4.1/System.Numerics.Vectors.xml

Resource

win11-20260911-en

windows11-21h2-x64

9 signatures

120 seconds

adware discovery spyware

Behavioral task

behavioral19

Sample

CheatPractice1.0.4.1/System.Runtime.CompilerServices.Unsafe.dll

Resource

win11-20260911-en

windows11-21h2-x64

0 signatures

120 seconds

Behavioral task

behavioral20

Sample

CheatPractice1.0.4.1/System.Runtime.CompilerServices.Unsafe.xml

Resource

win11-20260911-en

windows11-21h2-x64

9 signatures

120 seconds

adware discovery spyware

Behavioral task

behavioral21

Sample

CheatPractice1.0.4.1/System.Security.Principal.Windows.dll

Resource

win11-20260911-en

windows11-21h2-x64

0 signatures

120 seconds

Behavioral task

behavioral22

Sample

CheatPractice1.0.4.1/System.Security.Principal.Windows.xml

Resource

win11-20260911-en

windows11-21h2-x64

9 signatures

120 seconds

adware discovery spyware

Behavioral task

behavioral23

Sample

CheatPractice1.0.4.1/System.ServiceProcess.ServiceController.dll

Resource

win11-20260911-en

windows11-21h2-x64

0 signatures

120 seconds

Behavioral task

behavioral24

Sample

CheatPractice1.0.4.1/System.ServiceProcess.ServiceController.xml

Resource

win11-20260911-en

windows11-21h2-x64

9 signatures

120 seconds

adware discovery spyware

Behavioral task

behavioral25

Sample

CheatPractice1.0.4.1/System.Text.Encodings.Web.dll

Resource

win11-20260911-en

windows11-21h2-x64

0 signatures

120 seconds

Behavioral task

behavioral26

Sample

CheatPractice1.0.4.1/System.Text.Encodings.Web.xml

Resource

win11-20260911-en

windows11-21h2-x64

9 signatures

120 seconds

adware discovery spyware

Behavioral task

behavioral27

Sample

CheatPractice1.0.4.1/System.Text.Json.dll

Resource

win11-20260911-en

windows11-21h2-x64

0 signatures

120 seconds

Behavioral task

behavioral28

Sample

CheatPractice1.0.4.1/System.Text.Json.xml

Resource

win11-20260911-en

windows11-21h2-x64

9 signatures

120 seconds

adware discovery spyware

Behavioral task

behavioral29

Sample

CheatPractice1.0.4.1/System.Threading.Tasks.Extensions.dll

Resource

win11-20260911-en

windows11-21h2-x64

0 signatures

120 seconds

Behavioral task

behavioral30

Sample

CheatPractice1.0.4.1/System.Threading.Tasks.Extensions.xml

Resource

win11-20260911-en

windows11-21h2-x64

9 signatures

120 seconds

adware discovery spyware

Behavioral task

behavioral31

Sample

CheatPractice1.0.4.1/System.ValueTuple.dll

Resource

win11-20260911-en

windows11-21h2-x64

0 signatures

120 seconds

Behavioral task

behavioral32

Sample

CheatPractice1.0.4.1/System.ValueTuple.xml

Resource

win11-20260911-en

windows11-21h2-x64

9 signatures

120 seconds

adware discovery spyware

Report Analysis Logs

General

Target
CheatPractice1.0.4.1.rar
Size 2.0MB
Sample261024-pxtprsbx9l
SHA256 effef90d7287341943ae2608969dd4b61202b75b5c7813ffa13ca2a645449934
MD5 f060c03e6f13afea1f2f9188434e137b
SHA1 590d006e00240769dd42724a5701a4041eba8df5
SHA512 56ffb797c7fcebfe64c3833960725ff09d944b143a0d5d64a1a53b592507b3c0450c1bf79354f2eb3c997adfd7ba8a9a2606e4b562c7a8e43d1385adbedf4c2a
SSDEEP 49152:W7x9lkxGw/lPOXV0AY1WKBpp9dRbKDCqhvIuq9dJU78gLhzzUEgNdJ2:MlnQlP2V0h1zdLslq9dJUwgLZzp7
TLSH
T1D0A5333E5FF2A171860B77D5FA48CD54228E9E407329D4D68FDB6D88C25E992B0E42F0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4144	7zFM.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	4144	7zFM.exe
Token: 35	4144	7zFM.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4144	7zFM.exe

Processes

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\CheatPractice1.0.4.1.rar"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:4144

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads