Overview
overview
10Static
static
3csgo-cs2-s...in.zip
windows7-x64
1csgo-cs2-s...in.zip
windows10-2004-x64
1csgo-cs2-s...DME.md
windows7-x64
3csgo-cs2-s...DME.md
windows10-2004-x64
3csgo-cs2-s...er.bat
windows7-x64
1csgo-cs2-s...er.bat
windows10-2004-x64
1csgo-cs2-s...th.hpp
windows7-x64
3csgo-cs2-s...th.hpp
windows10-2004-x64
3csgo-cs2-s...or.hpp
windows7-x64
3csgo-cs2-s...or.hpp
windows10-2004-x64
3csgo-cs2-s...er.hpp
windows7-x64
3csgo-cs2-s...er.hpp
windows10-2004-x64
3csgo-cs2-s...in.cpp
windows7-x64
3csgo-cs2-s...in.cpp
windows10-2004-x64
3csgo-cs2-s...ther.h
windows7-x64
3csgo-cs2-s...ther.h
windows10-2004-x64
3csgo-cs2-s...urce.h
windows7-x64
3csgo-cs2-s...urce.h
windows10-2004-x64
3csgo-cs2-s...rstr.h
windows7-x64
3csgo-cs2-s...rstr.h
windows10-2004-x64
3csgo-cs2-s...er.exe
windows7-x64
10csgo-cs2-s...er.exe
windows10-2004-x64
10csgo-cs2-s...an.bat
windows7-x64
8csgo-cs2-s...an.bat
windows10-2004-x64
8csgo-cs2-s...ig.hpp
windows7-x64
3csgo-cs2-s...ig.hpp
windows10-2004-x64
3csgo-cs2-s...ui.cpp
windows7-x64
3csgo-cs2-s...ui.cpp
windows10-2004-x64
3csgo-cs2-s...ui.hpp
windows7-x64
3csgo-cs2-s...ui.hpp
windows10-2004-x64
3csgo-cs2-s...aw.cpp
windows7-x64
3csgo-cs2-s...aw.cpp
windows10-2004-x64
3Analysis
-
max time kernel
118s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
16-03-2024 00:34
Static task
static1
Behavioral task
behavioral1
Sample
csgo-cs2-spoofer-main.zip
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
csgo-cs2-spoofer-main.zip
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
csgo-cs2-spoofer-main/README.md
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
csgo-cs2-spoofer-main/README.md
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
csgo-cs2-spoofer-main/Serial.Change/Spoofer.bat
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
csgo-cs2-spoofer-main/Serial.Change/Spoofer.bat
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
csgo-cs2-spoofer-main/Source/auth.hpp
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
csgo-cs2-spoofer-main/Source/auth.hpp
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
csgo-cs2-spoofer-main/Source/color.hpp
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
csgo-cs2-spoofer-main/Source/color.hpp
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
csgo-cs2-spoofer-main/Source/driver.hpp
Resource
win7-20240215-en
Behavioral task
behavioral12
Sample
csgo-cs2-spoofer-main/Source/driver.hpp
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
csgo-cs2-spoofer-main/Source/main.cpp
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
csgo-cs2-spoofer-main/Source/main.cpp
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
csgo-cs2-spoofer-main/Source/other.h
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
csgo-cs2-spoofer-main/Source/other.h
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
csgo-cs2-spoofer-main/Source/resource.h
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
csgo-cs2-spoofer-main/Source/resource.h
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
csgo-cs2-spoofer-main/Source/xorstr.h
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
csgo-cs2-spoofer-main/Source/xorstr.h
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
csgo-cs2-spoofer-main/Spoofer.exe
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
csgo-cs2-spoofer-main/Spoofer.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
csgo-cs2-spoofer-main/Taskbar.Kill/Taskkill_clean.bat
Resource
win7-20231129-en
Behavioral task
behavioral24
Sample
csgo-cs2-spoofer-main/Taskbar.Kill/Taskkill_clean.bat
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
csgo-cs2-spoofer-main/imgui/imconfig.hpp
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
csgo-cs2-spoofer-main/imgui/imconfig.hpp
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
csgo-cs2-spoofer-main/imgui/imgui.cpp
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
csgo-cs2-spoofer-main/imgui/imgui.cpp
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
csgo-cs2-spoofer-main/imgui/imgui.hpp
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
csgo-cs2-spoofer-main/imgui/imgui.hpp
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
csgo-cs2-spoofer-main/imgui/imgui_draw.cpp
Resource
win7-20240215-en
Behavioral task
behavioral32
Sample
csgo-cs2-spoofer-main/imgui/imgui_draw.cpp
Resource
win10v2004-20240226-en
General
-
Target
csgo-cs2-spoofer-main.zip
-
Size
786KB
-
MD5
5736b68420da285f96af9d380840f14f
-
SHA1
bb32f696d327065feb501bd6728455c4de25959a
-
SHA256
ab7ef836e52bda5433e014057e88a57def522ef7e225a1a406208b19ac75e9a9
-
SHA512
7f059b111289f34d673d53e13d0f4d3f0d1824d4f55c62f12c43564bed40b1af08f458149e39dd0b71ecfef489d9f5270fec4ef28216bc968f6219b88033f62f
-
SSDEEP
12288:wzLV1pnjxB+GUNDISzPntD37aBhH04dsq570Jr8IA0xTCxJNuSPSBFSolanND9+:CpjP+GAcSzlb7adKj6ITC5MBs2aNx+
Malware Config
Signatures
-
Suspicious behavior: LoadsDriver 10 IoCs
pid Process 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 668 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\csgo-cs2-spoofer-main.zip1⤵PID:652
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:4352