General
- Target Neverlose CS2.exe
- Size 2.0MB
- Sample260620-t8xysahs7y
- SHA256 115fd433e318638e9fc794de81847be25637fc887cbe45f2ebc66f7b09abd5b6
- MD5 ed55c6522153d2d42fca3a21efdc82e5
- SHA1 63b2dd3ea7ab0e8d70b3d497a99ccf3ea379ddd7
- SHA512 07f848e3bd9416c114998c1043635db1acea0a98a8d9714309e8c586e3802642a8f0132cca86d3810f0ef60bc6f3697ce0864275ec2b420fda886506d04e63ce
- SSDEEP 24576:TXVrSLScusMmOvjjhzvLSIFosjxp9u8x/37Mfs/cwHbz4pj8C1j2mk3Ua5fiJ9U5:4uI2h3R1Hu8x/3ok9bz4pICVmkZ8665Z
- TLSH T1CAA5C03FF28B653EE06A16367A72A110983B7A6165124C1696FCF88CCF355701E3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target Neverlose CS2.exe
- Size 2.0MB
- SHA256 115fd433e318638e9fc794de81847be25637fc887cbe45f2ebc66f7b09abd5b6
- MD5 ed55c6522153d2d42fca3a21efdc82e5
- SHA1 63b2dd3ea7ab0e8d70b3d497a99ccf3ea379ddd7
- SHA512 07f848e3bd9416c114998c1043635db1acea0a98a8d9714309e8c586e3802642a8f0132cca86d3810f0ef60bc6f3697ce0864275ec2b420fda886506d04e63ce
- SSDEEP 24576:TXVrSLScusMmOvjjhzvLSIFosjxp9u8x/37Mfs/cwHbz4pj8C1j2mk3Ua5fiJ9U5:4uI2h3R1Hu8x/3ok9bz4pICVmkZ8665Z
- TLSH T1CAA5C03FF28B653EE06A16367A72A110983B7A6165124C1696FCF88CCF355701E3E787
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.