76d344e9f2b1da6c3356b1d66cb0badb9fbdb0ff53568aea8503c3c1a86a840b

Analysis

max time kernel
13s
max time network
4s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
12/10/2024, 19:51

Target

CSGO2 Injector.exe
Size

26KB
MD5

0edcce814cd28cd611b23bf1778724bd
SHA1

2ace743b2978ff8102ace3624bf70d5bbe8a38ba
SHA256

0289292334053251e619dabf53d325fb8981587d039e85d230c37f5d7cc93f30
SHA512

01b2e77b3ac77079c5a19ef6a53954eed9e8dd2dcf79ed3791ab37643f47f9491eb3203a4eedeaa64a2df14ec8f7149d3b695603686f4c24cdf27ede6e188ee9
SSDEEP

384:385CH0qDw+ocjPZmJweR00bgI27tfK9n0JKSbD+vamB1ENY89kYU78/2ZfQsvw/v:30w0arF09nmK+Y/YU7pfQs4/p

Score

1^/10

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 4488 wrote to memory of 4360	4488	CSGO2 Injector.exe	81
PID 4488 wrote to memory of 4360	4488	CSGO2 Injector.exe	81
PID 4488 wrote to memory of 3460	4488	CSGO2 Injector.exe	82
PID 4488 wrote to memory of 3460	4488	CSGO2 Injector.exe	82
PID 4488 wrote to memory of 2412	4488	CSGO2 Injector.exe	83
PID 4488 wrote to memory of 2412	4488	CSGO2 Injector.exe	83

C:\Users\Admin\AppData\Local\Temp\CSGO2 Injector.exe
"C:\Users\Admin\AppData\Local\Temp\CSGO2 Injector.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4488
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cls
  2⤵
  PID:4360
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c color D
  2⤵
  PID:3460
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c cls
  2⤵
  PID:2412