Overview
overview
7Static
static
3!!! DEPEND...64.exe
windows10-2004-x64
4!!! DEPEND...64.exe
windows11-21h2-x64
4!!! DEPEND..._0.exe
windows10-2004-x64
7!!! DEPEND..._0.exe
windows11-21h2-x64
7!!! DIAGNOSIS !!!.exe
windows10-2004-x64
1!!! DIAGNOSIS !!!.exe
windows11-21h2-x64
1!!! EXECUT...LI.exe
windows10-2004-x64
!!! EXECUT...LI.exe
windows11-21h2-x64
7!!! EXECUT...er.exe
windows10-2004-x64
1!!! EXECUT...er.exe
windows11-21h2-x64
1Analysis
- max time kernel
149s - max time network
151s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
16/04/2026, 00:43
Behavioral task
behavioral1
Sample
!!! DEPENDENCIES !!!\VC_redist.x64.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
!!! DEPENDENCIES !!!\VC_redist.x64.exe
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
!!! DEPENDENCIES !!!\Win64OpenSSL_Light-3_6_0.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
!!! DEPENDENCIES !!!\Win64OpenSSL_Light-3_6_0.exe
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
!!! DIAGNOSIS !!!.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
!!! DIAGNOSIS !!!.exe
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
!!! EXECUTION !!!\Resources\Source2Viewer-CLI.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
!!! EXECUTION !!!\Resources\Source2Viewer-CLI.exe
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
!!! EXECUTION !!!\Resources\cs2-dumper.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
!!! EXECUTION !!!\Resources\cs2-dumper.exe
Resource
win11-20260130-en
General
- Target !!! EXECUTION !!!\Resources\Source2Viewer-CLI.exe
- Size 48.7MB
- Sample260416-a225dadv2k
- SHA256 1ef232ccbc4c7e319db8c2467f7a3afe493ef86821aad0c6e6470b06787c1ae9
- MD5 8e8b2512849eccf99cb330d6cc1c85d0
- SHA1 e016064809e4f114fc4d590be02116e386b23441
- SHA512 ca030a81c6aa76b7ec12efe6bd46b3ddac7c7efb5f74259e88610f964b115b567093ead68380ce7360db45fdaa74e9cd849dfde1258753d3a3902691bf155434
- SSDEEP 1572864:PHO3wvHivBA2PmWBPf1ROAWeJUO/p7UFlDudgjzg:PO3hvBAeme37puDudgjc
- TLSH T14DB71256E2F900E8D57BC0B8C65B5527EBB23855133097EB56A08A692F33FE16E3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Loads dropped DLL 8 IoCs
pid Process 4564 Source2Viewer-CLI.exe 4564 Source2Viewer-CLI.exe 4564 Source2Viewer-CLI.exe 4564 Source2Viewer-CLI.exe 4564 Source2Viewer-CLI.exe 4564 Source2Viewer-CLI.exe 4564 Source2Viewer-CLI.exe 4564 Source2Viewer-CLI.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\.net\Source2Viewer-CLI\X+V9eUos_N_KM7HkdxkG5+eOz2dcjgc=\Source2Viewer-CLI.dll
- Size 216KB
- SHA256 bd0c68d95e555ace558e31422ac932ada4088438963b55b9693116775d2c09d7
- MD5 22f1044858746ebd163be3c7f45d0a90
- SHA1 10293ce1379ace609d2871470656fc9db7748446
- SHA512 1964c2a76015dd19883c4e384f1cdffc0dc1f7ec8a3752574166832e6a09ac9b12c7c69f971c206ccc48267acd019b7dae03cab47ded68fbd90c4534bfa3ab7c
- SSDEEP 3072:D7+lWGr0Ssf4FxYfqWjIE3vDiTbe9rehQEomzW+a1g+QictYkE3XUrVfAnRv5POn:D7+sGQmxYytE3vDJmomz/NicKeVyR
- TLSH T19F248C88A7EC4206E5AE0B3558B049550637BE026D37E70CE84A797D8E737C3C5A3B93
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Source2Viewer-CLI\X+V9eUos_N_KM7HkdxkG5+eOz2dcjgc=\System.Console.dll
- Size 84KB
- SHA256 2189c82e7713d31f8215aeea2270d541edc42a9634c187937b1fbbd22abb9058
- MD5 fc6872195d029a4887d2487310a78487
- SHA1 f4d9b1295665a07d074b0930329d97ae8c643a41
- SHA512 67223eca6aadae5efd73e3ea768dff8a25bbb73a318545617b8424735db6146ccafdfe04990cfcb5738872425495ae913d86c1ab073e9f3db8b36975f5c2eae1
- SSDEEP 768:GR81WAfmMc+/Bvyt6Ytn9zvoXsJf9AnmzbER/qsyCvvLxLKg8Rli/sa4aKEpxO:GgWVj6WnVMlqEvvtGg9/sa/ZxO
- TLSH T1D6833A2A6BE45A3FE7FE0B7528A362404B36F99E8A5BFB0F65C1045C254378193413E3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Source2Viewer-CLI\X+V9eUos_N_KM7HkdxkG5+eOz2dcjgc=\System.Private.CoreLib.dll
- Size 5.0MB
- SHA256 6a23b4d64e171cfa64133dd1b33c3cbfddffde812fbe19bb379422bca8aa59ba
- MD5 4903ceeafb825d03ff1816d1dfa6d2c0
- SHA1 84321e4e29a123e53b2c093b346dddbd2b5ee7f7
- SHA512 32580dc73724af6b751c9161f9a972610b906d61605a35484ea00d022a1a62d8a3c23634b9da089a84d9f2eda0227daa136f207bd8143f5fab80233d29697fa4
- SSDEEP 98304:UdG6OSBwGSHiOcS0ZqXFllllYKlKKwZNux:gG/SBwJcJqXFllllYKlKfZNu
- TLSH T1DE364A11E3D89F3BE58E433A417381345ABAECDA5717AA8B7805A35974A3700A7137F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Source2Viewer-CLI\X+V9eUos_N_KM7HkdxkG5+eOz2dcjgc=\System.Runtime.InteropServices.dll
- Size 64KB
- SHA256 fa82da7ac8371f433f0ea168a6ef3bb4eb64929fcd39e76735808da23bc19673
- MD5 7a07a8d86c5c0931655187d926a5ded5
- SHA1 9df88cf4adb1d5afb9003e8069aceab4c6ee16b3
- SHA512 32828a6617f47dc8a9ef41e80e6d58758b79d04d8d8c5d39441be4924a3da01e54235c25b3571f76857d0bbf86d5eacf8d3e5d29c156e90da9768093dd6a41dd
- SSDEEP 768:Ep+fjOnNnP3KKi0luw6Uz7nmpGTcpJavRqWZ0x/wMmrpMs9OqK3XKHO:ElnNP6GZ6DJWRFS/wM6ppOqKn
- TLSH T144533B213BEC037BDB5A8B31AC7272900FF2B6D95253FA29A9D4449A04EF7C14731766
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Source2Viewer-CLI\X+V9eUos_N_KM7HkdxkG5+eOz2dcjgc=\System.Runtime.dll
- Size 44KB
- SHA256 fde2ed39ace2db0faf77346d3783f087afd44fd169b2238b00590933b0966899
- MD5 c26756feb8a0023090ac88ef1af76f63
- SHA1 b755073764175327898e105099dbdf7bd2fd1c52
- SHA512 e331ce417c1882bf7a75992b56baa0dca543ed07eba5f6a273b75954ed14e9d6f7fafbbc559d12b9422984aed7f994a473a6238aea5252c222e9c8926cbb9e35
- SSDEEP 768:1wIjMmlf72E79fFFK/T5r57G52E3Jgz7c7u501uENPoL+0GfJT4YA96hKWTuV/5q:10GSA3Yvp50v4bSRS0m
- TLSH T16B137274EE9B5333CD8AA372ECB360A00EF673C474775FBA444A8616A0CB35442767A5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Source2Viewer-CLI\X+V9eUos_N_KM7HkdxkG5+eOz2dcjgc=\System.Threading.dll
- Size 48KB
- SHA256 d4158376db5eb0d4908963e2026bf2dd27a897533c1ec8ea1a4ae322e93162c3
- MD5 cf1f20f1c37f6478361901e320154a8f
- SHA1 14e8c51ca166fabce74ae286dc03ffe450795036
- SHA512 ca3b1dd99ce852ea98a99f00945e7add025548172db7200628c7ec716f82444abdb1c7932d5b945c5dc5746c0dd482a88db8aeb6c167d2d046fe21add64b1657
- SSDEEP 768:+OgtOpX8BM3pfI5JXG2i9RhQdrxEyfzpXR5t6VURQo:+OwX/ARhulR5dRb
- TLSH T16A23F911A7F8073EF7BF0B7ADEB524144272FEE61911D65E6049400E25ABBC096E27B3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\.net\Source2Viewer-CLI\X+V9eUos_N_KM7HkdxkG5+eOz2dcjgc=\ValveResourceFormat.dll
- Size 1.6MB
- SHA256 3ea53bb29b0e11b4a1c6de3b4b612e7f71a7143b7783d9e03a927846f613bea9
- MD5 5e4b8bcd0e285f65251f8006bcaac5da
- SHA1 867a27b99643938018f2be8ee05d59944c5644c3
- SHA512 d38e7ca77df52c3b3a04078c03c6d5db02599fe78f377155a4427228e10c11284c6a818eefbd802d054d603ba85150c9b4e2a8564643d60ba73d35c2dc8d83b2
- SSDEEP 24576:gETDQurmJuhbVAp1Dk4ZzZsZkZwZFZuZJZBZ8ZHZ44/W99Km:gE5hxU1IeWW9k
- TLSH T12975E43127F81D9BF1FBEB35AAF22047457BBDA22718E68E4544038D5A66B419C1233F
- MD5 SHA1 SHA512 SSDEEP TLSH