Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
09/07/2024, 21:55
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cs2-dumper.exe
Resource
win7-20240705-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
cs2-dumper.exe
Resource
win10v2004-20240709-en
2 signatures
150 seconds
General
-
Target
cs2-dumper.exe
-
Size
1.8MB
-
MD5
0ad9f31aab0f7a4c18d287b378d6a2db
-
SHA1
2e4f4b1f7ae9575c74d790af3eff8a2470554eac
-
SHA256
276cb2804ec1feddc8f146dc9cd786d926fc7fb28b7bbf32a8699b38d132d4bf
-
SHA512
3074c2a4cf5f2a5ceb7a4001bf9c0f2bc60ab11601e938a5ce8ca10664f589cc906418ea6c57945ede5347b41f473a92e443bc027f01cc6693636dae93dba5bf
-
SSDEEP
49152:RWJmL6owpTREjP0NjhkSLtcBBUjli6A/x1nym6k:qjlY/6k
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4016 cs2-dumper.exe 4016 cs2-dumper.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4016 cs2-dumper.exe