Analysis
- user interaction
yes - max time kernel
12s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
05/07/2026, 22:48
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
External base Counter-Strike 2.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
External base Counter-Strike 2.exe
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target External base Counter-Strike 2.exe
- Size 2.0MB
- Sample260705-2q4ydaf19v
- SHA256 3143f6029ac855eb903abc1eec7d87a42a08df357f11f13b65cc39d1d322922e
- MD5 c953c6efae6bf5a26f638799cee8929e
- SHA1 e632d06b6cc5a377103ab010e8d76f0f24a48df3
- SHA512 f311f1eafc147cd75d4f065f70599dafcb686c83c6973df5ab189e68a8590b6e51e547e71e75fee9e751ab16289965e51a768e17618dc7d2ea90303ec48c5b26
- SSDEEP 49152:W2AhPr5fGFnqYyRd+BP9WIoVbBBCN5nIx5w1:zjoVy1
- TLSH T126A54947E6B641F0C5BAD0389142722FF971345A8334A7DB6BD45B471B63BE4AABE300
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe 4748 External base Counter-Strike 2.exe - Suspicious use of WriteProcessMemory 1 IoCs
description pid Process procid_target PID 4748 wrote to memory of 5476 4748 External base Counter-Strike 2.exe 89
Processes
-
C:\Users\Admin\AppData\Local\Temp\External base Counter-Strike 2.exe"C:\Users\Admin\AppData\Local\Temp\External base Counter-Strike 2.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4748 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c cls2⤵PID:5476
-