Analysis
-
max time kernel
119s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
26-10-2024 20:50
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CSGO2 Injector.exe
Resource
win7-20241010-en
windows7-x64
1 signatures
150 seconds
General
-
Target
CSGO2 Injector.exe
-
Size
26KB
-
MD5
0edcce814cd28cd611b23bf1778724bd
-
SHA1
2ace743b2978ff8102ace3624bf70d5bbe8a38ba
-
SHA256
0289292334053251e619dabf53d325fb8981587d039e85d230c37f5d7cc93f30
-
SHA512
01b2e77b3ac77079c5a19ef6a53954eed9e8dd2dcf79ed3791ab37643f47f9491eb3203a4eedeaa64a2df14ec8f7149d3b695603686f4c24cdf27ede6e188ee9
-
SSDEEP
384:385CH0qDw+ocjPZmJweR00bgI27tfK9n0JKSbD+vamB1ENY89kYU78/2ZfQsvw/v:30w0arF09nmK+Y/YU7pfQs4/p
Score
1/10
Malware Config
Signatures
-
Suspicious use of WriteProcessMemory 6 IoCs
Processes:
CSGO2 Injector.exedescription pid process target process PID 1852 wrote to memory of 2940 1852 CSGO2 Injector.exe cmd.exe PID 1852 wrote to memory of 2940 1852 CSGO2 Injector.exe cmd.exe PID 1852 wrote to memory of 2940 1852 CSGO2 Injector.exe cmd.exe PID 1852 wrote to memory of 2944 1852 CSGO2 Injector.exe cmd.exe PID 1852 wrote to memory of 2944 1852 CSGO2 Injector.exe cmd.exe PID 1852 wrote to memory of 2944 1852 CSGO2 Injector.exe cmd.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\CSGO2 Injector.exe"C:\Users\Admin\AppData\Local\Temp\CSGO2 Injector.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:1852 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c cls2⤵PID:2940
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c color D2⤵PID:2944