Behavioral task
behavioral1
Sample
read.txt
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
read.txt
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
supremacy_csgo.dll
Resource
win7-20240708-en
General
-
Target
silvhack.rar
-
Size
16.0MB
-
MD5
f16f3c1f26fb366b1a3d4130119a11a5
-
SHA1
78e90c87c2a132fd4a22ff87e83d1a6d930492e0
-
SHA256
8954f11bd717bfd6a196b076b2273ae5b3266766e4b94c0024cb368aa1a7ed59
-
SHA512
04954ffd55b7e4ca8ed8fa39b3638cdfa349b76effbb3c5f28792a4684f4b92d52caf0c98c1a5159658ceaff6bdf3bc008744c97a1dc3c7490511751441319b9
-
SSDEEP
393216:+tqACYKZI4pWyWsVCwK6ZUsgdrFCWTw49R5vMPT+AEnwsSfc:Wl25Ws8nTprFL9R1FEfc
Malware Config
Signatures
-
resource yara_rule static1/unpack001/supremacy_csgo.dll themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/supremacy_csgo.dll
Files
-
silvhack.rar.rar
-
read.txt
-
supremacy_csgo.dll.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
Size: 890KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 20KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 577B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 268B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 69KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 22.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 15.2MB - Virtual size: 15.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ