Overview
overview
3Static
static
3BUILD_CHORIG.ps1
windows10-ltsc_2021-x64
3CheadlewareLoader.exe
windows10-ltsc_2021-x64
1source/build.ps1
windows10-ltsc_2021-x64
3source/bui...er.exe
windows10-ltsc_2021-x64
1source/bui...ay.dll
windows10-ltsc_2021-x64
1source/bui...er.exe
windows10-ltsc_2021-x64
1source/loa...uth.js
windows10-ltsc_2021-x64
3source/loa...ain.js
windows10-ltsc_2021-x64
3source/loa...ort.js
windows10-ltsc_2021-x64
3Analysis
- max time kernel
12s - max time network
8s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260911-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
29/10/2026, 23:28
Static task
static1
Behavioral task
behavioral1
Sample
BUILD_CHORIG.ps1
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral2
Sample
CheadlewareLoader.exe
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral3
Sample
source/build.ps1
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral4
Sample
source/build/CheadlewareLoader.exe
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral5
Sample
source/build/CheadlewareRelay.dll
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral6
Sample
source/build/single-file/CheadlewareLoader.exe
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral7
Sample
source/loader/loader_auth.js
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral8
Sample
source/loader/local_loader_main.js
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral9
Sample
source/loader/local_loader_support.js
Resource
win10ltsc2021-20260911-en
General
- Target source/build/CheadlewareLoader.exe
- Size 14.9MB
- Sample261029-3fzrcafw51
- SHA256 902ac2d4a7647c0a7eee158c8e928c6da5fb2f459cf0666fde2bdb24ec290442
- MD5 54ebce10a7a5baf5281e876f956a2329
- SHA1 fbfc8a9e3d4c32bd3681af0e35a23cf462c2f517
- SHA512 4461e2ec38410f88b859503b1eef570039b945437dee4cafe001df7a487220948718246de6b0b5f4fd1306923ebeba35d46231ec1ce126d181479932a730187b
- SSDEEP 393216:lXGsNEV3q7c7tTF9/f7tSV3/WM0VIXTu:kbVaKth9/zeAe
- TLSH T108F60287A1C552BCC451C138E2455BFAF1E4BC480FB999ABAFC25A113F31DD4C9BAB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2712 CheadlewareLoader.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2712 CheadlewareLoader.exe