Overview
overview
3Static
static
3BUILD_CHORIG.ps1
windows10-ltsc_2021-x64
3CheadlewareLoader.exe
windows10-ltsc_2021-x64
1source/build.ps1
windows10-ltsc_2021-x64
3source/bui...er.exe
windows10-ltsc_2021-x64
1source/bui...ay.dll
windows10-ltsc_2021-x64
1source/bui...er.exe
windows10-ltsc_2021-x64
1source/loa...uth.js
windows10-ltsc_2021-x64
3source/loa...ain.js
windows10-ltsc_2021-x64
3source/loa...ort.js
windows10-ltsc_2021-x64
3General
- Target CheadlewareLoader.zip
- Size 47.8MB
- Sample261029-3fzrcafw51
- SHA256 4c54b3a2c354d8f1968e853f714b6a7394fbe9155305d583aaf81ed247bd3691
- MD5 faae730e797d88d3c145946d4a0df4a3
- SHA1 0f4bcc101af0b9236d0746ab1bd6f201edc728de
- SHA512 813868d95814b51ebaeb6f1bff8363f6386c975c0457d949d55b2b08a58a72ebe5f0796d398b9152b9814d5ddccb68f711d083e4a7d167a4054cb73ea2fc8166
- SSDEEP 786432:pclHXc8JFPAy9clHXc8JFPAy8clHXc8JFPAygIpXbZECeFV7KwzwgK:pcCw9cCw8cCw3bKrvK
- TLSH T1E1B7334DB9E5D481344B407AB892C9D583AFFE404C9E6198EA7C1FED0821CC7D95ECEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
BUILD_CHORIG.ps1
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral2
Sample
CheadlewareLoader.exe
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral3
Sample
source/build.ps1
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral4
Sample
source/build/CheadlewareLoader.exe
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral5
Sample
source/build/CheadlewareRelay.dll
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral6
Sample
source/build/single-file/CheadlewareLoader.exe
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral7
Sample
source/loader/loader_auth.js
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral8
Sample
source/loader/local_loader_main.js
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral9
Sample
source/loader/local_loader_support.js
Resource
win10ltsc2021-20260911-en
Malware Config
Targets
-
- Target BUILD_CHORIG.ps1
- Size 1KB
- SHA256 aab2175a5c649d56f05f6f07d0fdf88feb5a9dad7b26d98db811ba5347d23c72
- MD5 322aa5622086ecd364cfcaf835ebc6fd
- SHA1 f627b20fade190112e82ff1cce3918829dade8f9
- SHA512 250472c5e8206dddd327e30f5a20f02b563a12ce7384d88ec8e51f8e963ff60146f37990813bd07614051d81628cee6f0df61c644f9e5d782f9c5af033e89509
- TLSH T11521112AB1428AD90CEC0598A8B98718CB0BD01FB150C352F564470CD6FD93FCAEE627
- MD5 SHA1 SHA512 TLSH
Score3/10 -
- Target CheadlewareLoader.exe
- Size 14.9MB
- SHA256 902ac2d4a7647c0a7eee158c8e928c6da5fb2f459cf0666fde2bdb24ec290442
- MD5 54ebce10a7a5baf5281e876f956a2329
- SHA1 fbfc8a9e3d4c32bd3681af0e35a23cf462c2f517
- SHA512 4461e2ec38410f88b859503b1eef570039b945437dee4cafe001df7a487220948718246de6b0b5f4fd1306923ebeba35d46231ec1ce126d181479932a730187b
- SSDEEP 393216:lXGsNEV3q7c7tTF9/f7tSV3/WM0VIXTu:kbVaKth9/zeAe
- TLSH T108F60287A1C552BCC451C138E2455BFAF1E4BC480FB999ABAFC25A113F31DD4C9BAB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target source/build.ps1
- Size 10KB
- SHA256 ebb0f96b8fb4dbb1fe3664676da002c2fc786119767a95c29e1a6c8140f263a0
- MD5 784c69da82dbc022837ba683fb89cf2b
- SHA1 8a413427c41839958f9b48073a45ff792ed4b827
- SHA512 241be15edae2fcd7ce7d8aacf135917503aae898b1448c2d276aefa90b72e1ed0793bec14224537300dbc9e4ed438e3165349b1b0ddd97d5e42fba176adfe2bd
- SSDEEP 192:5CB04KK+ciagRNMumtFEcBJ4SPng+p6AoV5UfdP9EBkLQnoF7Sxk8Qino:5i3g/pmtywng+p6AoHa3MnGSxwEo
- TLSH T12722B616352A58D319F3697E45D98814B603402F0C38B614FD6C5258BFF623ECEBAE5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target source/build/CheadlewareLoader.exe
- Size 14.9MB
- SHA256 902ac2d4a7647c0a7eee158c8e928c6da5fb2f459cf0666fde2bdb24ec290442
- MD5 54ebce10a7a5baf5281e876f956a2329
- SHA1 fbfc8a9e3d4c32bd3681af0e35a23cf462c2f517
- SHA512 4461e2ec38410f88b859503b1eef570039b945437dee4cafe001df7a487220948718246de6b0b5f4fd1306923ebeba35d46231ec1ce126d181479932a730187b
- SSDEEP 393216:lXGsNEV3q7c7tTF9/f7tSV3/WM0VIXTu:kbVaKth9/zeAe
- TLSH T108F60287A1C552BCC451C138E2455BFAF1E4BC480FB999ABAFC25A113F31DD4C9BAB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target source/build/CheadlewareRelay.dll
- Size 41KB
- SHA256 6fe5b03bbe100e37cd61e3bd77fbc53f3e00970fb5119496527289687c9af742
- MD5 05cf746dd92be0bcf30f98a247f29f40
- SHA1 4a8efa12c6ffc4aa2732f1296d7614b13f39e72e
- SHA512 8b73cacf2342d2a10ef52d3cd41a25c19cc94d7d51005e557d3d8a0baede98727d23f32c34f4daae8e3423190490188af23ddefe58385f0ff460ec617f907cdb
- SSDEEP 768:dS9QLpus9Ek9VeFViP45FWVArH03KEVuSGFF6JYQX5Y0dQtkhD:dFjikveX84FcKH03KGvGFF6JYQX53a
- TLSH T1EE13F647D41EA1A8C249C974A74B2322B5F77C495B292FFB43988F352EE36C0713B649
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target source/build/single-file/CheadlewareLoader.exe
- Size 14.9MB
- SHA256 902ac2d4a7647c0a7eee158c8e928c6da5fb2f459cf0666fde2bdb24ec290442
- MD5 54ebce10a7a5baf5281e876f956a2329
- SHA1 fbfc8a9e3d4c32bd3681af0e35a23cf462c2f517
- SHA512 4461e2ec38410f88b859503b1eef570039b945437dee4cafe001df7a487220948718246de6b0b5f4fd1306923ebeba35d46231ec1ce126d181479932a730187b
- SSDEEP 393216:lXGsNEV3q7c7tTF9/f7tSV3/WM0VIXTu:kbVaKth9/zeAe
- TLSH T108F60287A1C552BCC451C138E2455BFAF1E4BC480FB999ABAFC25A113F31DD4C9BAB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target source/loader/loader_auth.cpp
- Size 8KB
- SHA256 8a6e5be182eaea8320a714c2669d39018fea8ab903e425956f4cbf20324cc6c5
- MD5 6af250f5688471bfa70d82fda2afe5dd
- SHA1 4bf414e187241169414f8c09711fc71fcc3cf161
- SHA512 d60f390171ee65ee864d0688006a2db00d163125a14cff54c510bddf44ecc6f1cd682b918c6efce19ad4ad1177b26c1742f5249b0842028a025b836e42a08e94
- SSDEEP 192:jWeW1vLtSQl4XjPIpb5JsUJrWFUckSjssvzZxnNhlBJss5SR6Sf3z1/:jRI9JsYmjssNVPJss5SRr
- TLSH T1750231C22CF3A816169B913FEA87C406B760E8037BCDC684F58D8114BF451ACFBA45D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target source/loader/local_loader_main.cpp
- Size 66KB
- SHA256 edeb08a339d1dff6b33e65747a14abc7cd684530318e50c5ac1426517bc87a6e
- MD5 9e85b4b8d696cafc11070f9c7a7f47a5
- SHA1 bcee14ceba393d4b998c85e940300f358d12d8e4
- SHA512 6b78c17ea62df231b271cb9520cab6b209d52aadfbda9947900d87be528a6999e2d4101dbace3b51a720be013a1ccd581aede3def673b864dc78d3b5aef4d871
- SSDEEP 1536:DhWzHWFyd7fYHpIih36v+7sj9z9+rSDNnXTEJ2bN1d:DhWzHWFydEHuj9z9bNv
- TLSH T10E63C64849EB55045D73503ADFE3D4881238B2DB7E4CC9843A9F62499FC1099E9AB3EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target source/loader/local_loader_support.cpp
- Size 47KB
- SHA256 647bedc8be7cad83d2358fe5ea6fe13ac426ee9ecf1d731da2b106c91fd9fdbe
- MD5 82bff4aa4d4224b4917a7f4e9d681651
- SHA1 65a32bd152f1458e79ddb01f98249071a3df5c52
- SHA512 93069404f1228e63465c5d0caab263cc72a31faaca802109de33f7520adb18c144159690dc25a4de14fa07644fbd434396d543e4f156483778d83c292988df22
- SSDEEP 768:IP5mjrlZPuYWzzyjpVk6KashO5Gu435b/VL0VVvDx:E5mXllWfyjpVk6KashO5v435b/mVVbx
- TLSH T16023B5816CB7B40A1A83907EF717C5069AA040037799C294FE5EC2817FE51B6D2BB6DF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10