Analysis
-
max time kernel
30s -
platform
windows11-21h2_x64 -
resource
win11-20240419-en -
resource tags
arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system -
submitted
07/05/2024, 14:57
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
CS2 Bhop.exe
Resource
win11-20240419-en
1 signatures
300 seconds
General
-
Target
CS2 Bhop.exe
-
Size
987KB
-
MD5
68319dcfb1a08ce2256314f469d58589
-
SHA1
058697b6558bb4940ef94b573be5b29fd05ff699
-
SHA256
157c88b199aefdf1b13a27662d4e31e047cc979aa7dacbaeb75006659a694689
-
SHA512
bcabdd2548f08a1b706adad8b4e36f401babaf61b22ea8db11935a036e19fc91b3a52b51bc079faf3b5b279c8cb7c3677be9a0e56ce08437311a669e5f703a5b
-
SSDEEP
24576:PRaZROMOm8FN7TjsPnzt2heeRhQbJEOeamz3Q6:JkxOm+7TjsPnztyDMmaE3
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 10 IoCs
pid Process 3064 CS2 Bhop.exe 3064 CS2 Bhop.exe 3064 CS2 Bhop.exe 3064 CS2 Bhop.exe 3064 CS2 Bhop.exe 3064 CS2 Bhop.exe 3064 CS2 Bhop.exe 3064 CS2 Bhop.exe 3064 CS2 Bhop.exe 3064 CS2 Bhop.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\CS2 Bhop.exe"C:\Users\Admin\AppData\Local\Temp\CS2 Bhop.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
PID:3064
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:3844