General
- Target cs2 skinchanger.exe
- Size 10.5MB
- Sample260627-xvvs2sdt5m
- SHA256 8925e35f4afb0d2e59a0e20ac0e0a0b10fd3d80eab9c0a7cde245edb74ba28e5
- MD5 1a5c081dc53b49dc89d0e58bbbd96b94
- SHA1 c98365e4adf3ea77a1ada9eff48f854b2963c3f1
- SHA512 daa666cfdcab6f4861f6ffdfc3ad585ac72c4c66e701e20c4986907f52fd6b31b5c208f86c58236db9afa2bffb74eb2c4e01ba4706bf917203eddc422e2e26c6
- SSDEEP 196608:s3tMWdf72hHUsIbE3GUEY4Wkzs3UX79HbeVF0qCNdj9Jdrdy:s3tMW572VIbGla97jqCNxBJ
- TLSH T16FB6F0A8C63C5D60BF011F3AC42289E6E426BD2C953850FD7D8B69E66DE79D0C1D078E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cs2 skinchanger.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target cs2 skinchanger.exe
- Size 10.5MB
- SHA256 8925e35f4afb0d2e59a0e20ac0e0a0b10fd3d80eab9c0a7cde245edb74ba28e5
- MD5 1a5c081dc53b49dc89d0e58bbbd96b94
- SHA1 c98365e4adf3ea77a1ada9eff48f854b2963c3f1
- SHA512 daa666cfdcab6f4861f6ffdfc3ad585ac72c4c66e701e20c4986907f52fd6b31b5c208f86c58236db9afa2bffb74eb2c4e01ba4706bf917203eddc422e2e26c6
- SSDEEP 196608:s3tMWdf72hHUsIbE3GUEY4Wkzs3UX79HbeVF0qCNdj9Jdrdy:s3tMW572VIbGla97jqCNxBJ
- TLSH T16FB6F0A8C63C5D60BF011F3AC42289E6E426BD2C953850FD7D8B69E66DE79D0C1D078E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
XMRig Miner payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Suspicious use of SetThreadContext