Overview
overview
7Static
static
3!!! DEPEND...64.exe
windows10-2004-x64
4!!! DEPEND...64.exe
windows11-21h2-x64
4!!! DEPEND..._0.exe
windows10-2004-x64
7!!! DEPEND..._0.exe
windows11-21h2-x64
7!!! DIAGNOSIS !!!.exe
windows10-2004-x64
1!!! DIAGNOSIS !!!.exe
windows11-21h2-x64
1!!! EXECUT...LI.exe
windows10-2004-x64
!!! EXECUT...LI.exe
windows11-21h2-x64
7!!! EXECUT...er.exe
windows10-2004-x64
1!!! EXECUT...er.exe
windows11-21h2-x64
1Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
16/04/2026, 00:43
Behavioral task
behavioral1
Sample
!!! DEPENDENCIES !!!\VC_redist.x64.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
!!! DEPENDENCIES !!!\VC_redist.x64.exe
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
!!! DEPENDENCIES !!!\Win64OpenSSL_Light-3_6_0.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
!!! DEPENDENCIES !!!\Win64OpenSSL_Light-3_6_0.exe
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
!!! DIAGNOSIS !!!.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
!!! DIAGNOSIS !!!.exe
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
!!! EXECUTION !!!\Resources\Source2Viewer-CLI.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
!!! EXECUTION !!!\Resources\Source2Viewer-CLI.exe
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
!!! EXECUTION !!!\Resources\cs2-dumper.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral10
Sample
!!! EXECUTION !!!\Resources\cs2-dumper.exe
Resource
win11-20260130-en
General
- Target !!! EXECUTION !!!\Resources\cs2-dumper.exe
- Size 2.1MB
- Sample260416-a225dadv2k
- SHA256 d8c6037429da3502682905ec8d0e6bb3ae33da5f0392a293d67d9e1b9b546de4
- MD5 a38a353a4b6b0230e453c79455fbf3ac
- SHA1 09c8ec91c1f4212a86c67df575cddd695d07892e
- SHA512 7b364bf4a88bd27c6d546ee06de9a7a7a45a8f5e0cf9678d699e0fbf18428fcbd841dce396d98e63370c39c6ab7fab8147bd25134e430b17bc1587ffb40e45e3
- SSDEEP 49152:K3t5r5U+LN4W0UWZa3EDauXkfwwpgRxgOoowpQMvc:e6UybSiP
- TLSH T17AA52816BAAE98ECD2A9C474C3464A732B6170CB0B367AFF40D456353E69AE41F3C714
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4676 cs2-dumper.exe 4676 cs2-dumper.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4676 cs2-dumper.exe