General
- Target 7l_csgo_latest_setup.exe
- Size 6.1MB
- Sample260719-y2ewvaa16r
- SHA256 c51d75dbfbcba385cb75d84ee2570dfeabd2a1bb60a18b7f3741acd81db57bad
- MD5 a81d91f6ebe3f347d505ecb1c36bfb23
- SHA1 74a8596ad4d6eaebf224f8cb2cb4ec9d8913f9e7
- SHA512 25ec7356f88117a9a8fd6f69ab382b5634068f6c1bfcf4d54e4f65a9a2adb8bf8a4723044d86e9aa986a2388ede620256519d9e05d9e2643f116c91b662c817f
- SSDEEP 98304:x5OHojiUOlVfKfG6WDdy+ScjZ9CyZN3C5skVxCe/pMPmtQUffCbS8v2MDjYb/H3B:rnSK/gLSK9JZ45sCxCe/jfCu8O1DH3B
- TLSH T12F56123B728B653EE42A4A3575B2A260583B6E61E4164C079BF0DC4CCF3A1711E3F697
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
7l_csgo_latest_setup.exe
Resource
win10ltsc2021-20260513-en
24 signatures
150 seconds
Behavioral task
behavioral2
Sample
7l_csgo_latest_setup.exe
Resource
win11-20260513-en
24 signatures
150 seconds
Malware Config
Targets
-
- Target 7l_csgo_latest_setup.exe
- Size 6.1MB
- SHA256 c51d75dbfbcba385cb75d84ee2570dfeabd2a1bb60a18b7f3741acd81db57bad
- MD5 a81d91f6ebe3f347d505ecb1c36bfb23
- SHA1 74a8596ad4d6eaebf224f8cb2cb4ec9d8913f9e7
- SHA512 25ec7356f88117a9a8fd6f69ab382b5634068f6c1bfcf4d54e4f65a9a2adb8bf8a4723044d86e9aa986a2388ede620256519d9e05d9e2643f116c91b662c817f
- SSDEEP 98304:x5OHojiUOlVfKfG6WDdy+ScjZ9CyZN3C5skVxCe/pMPmtQUffCbS8v2MDjYb/H3B:rnSK/gLSK9JZ45sCxCe/jfCu8O1DH3B
- TLSH T12F56123B728B653EE42A4A3575B2A260583B6E61E4164C079BF0DC4CCF3A1711E3F697
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
1