210c115d65bb7ad48ec1d56aaac584978e65e694d0b1c4f30b9b0a0a08c78836

Sharing

Copy URL Twitter E-mail

General

Target
CS2-dumper-main.zip
Size 23KB
Sample260722-19tq3sch46
SHA256 210c115d65bb7ad48ec1d56aaac584978e65e694d0b1c4f30b9b0a0a08c78836
MD5 3e063fed2d26eb61911edce7f9ac0ee4
SHA1 1a44b5ce363f813d419292c0f920d50f51bdfc1b
SHA512 d3205c37227901ddc99bc2f26c86c8d79cd7a53ee84236aa3fe3d206846f06cf39cab2eaf67f1e000b7163cf6ad5250723420a4fee107d505523572093530cb0
SSDEEP 384:YV7+45LFJ7olx3knThXDIKfiqJlm+KawXOYeY77QFnb0LqRJVqMN8CrK2yP1L9kh:TkL77olx0XdfRJ3eXOYZ78pbqq/hNhrP
TLSH
T159B2C010D76E9960C282B574B401F9B7D604A2B9AD8CDB77F92700F74F05F182E4EA8E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  CS2-dumper-main.zip
- Size 23KB
- SHA256 210c115d65bb7ad48ec1d56aaac584978e65e694d0b1c4f30b9b0a0a08c78836
- MD5 3e063fed2d26eb61911edce7f9ac0ee4
- SHA1 1a44b5ce363f813d419292c0f920d50f51bdfc1b
- SHA512 d3205c37227901ddc99bc2f26c86c8d79cd7a53ee84236aa3fe3d206846f06cf39cab2eaf67f1e000b7163cf6ad5250723420a4fee107d505523572093530cb0
- SSDEEP 384:YV7+45LFJ7olx3knThXDIKfiqJlm+KawXOYeY77QFnb0LqRJVqMN8CrK2yP1L9kh:TkL77olx0XdfRJ3eXOYZ78pbqq/hNhrP
- TLSH
  T159B2C010D76E9960C282B574B401F9B7D604A2B9AD8CDB77F92700F74F05F182E4EA8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  CS2-dumper-main/README.md
- Size 9B
- SHA256 c05b6bb7aa1e8147f65b77c03cdb768cd1e9d10589156b681886423b25807aa3
- MD5 34f88ca5e396ad423718d9250024b146
- SHA1 fecc6d95ac060ddbca8c312fd7a7f7a2c6cc867b
- SHA512 a3535be467934402ecf613943956711140d93266d29c510a5cf0a3fd9503238ed97c680e6757caff7a1eb1eb12d5d46932a46d28558994fc1114a446df469dc9
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral3 behavioral4
- Target
  CS2-dumper-main/femboy/database.hpp
- Size 87KB
- SHA256 2b793854d5714c5381a963cc77c5dd14fcf212caf2370820a990dd1aa04e24b1
- MD5 afb012806a5b1aacbeea6acebbff0513
- SHA1 848d4786b6d99a0467e46f8f836026ad2787d502
- SHA512 9a4e2d88c8f148eb7f49376d68caa3389121bb8ba93456fdc3f6c40712bdbcc4a6f1fa0fc5c6805e3a9880b99d52d5b8377554ef68501cf187b267d6540adc35
- SSDEEP 768:Ycx1ZjnoW64//+T30dYclc9vxNN/1eqIO8KVd:Ycx1tnoCw3LoipYKd
- TLSH
  T12C939C40CA121CDF4171FFAC4B9A4CC8647E00A729D1296AB90F976C9B5FCACB779C19
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  CS2-dumper-main/femboy/femboy.vcxproj
- Size 7KB
- SHA256 24671d2f0d6f451cbeb28a268c76107463ba3b78aac046152ea8e2304e5ac51b
- MD5 5f4adc53e1a12f4421e2c72ed4554893
- SHA1 f2aa8de5b8731f5d89b2ec7c04c65a16bca4a51a
- SHA512 1a9ae8b33e7455d1d4755279116e3cedc31ba9dabce49658a26530827af7f193227145b0db0a8c65342e7bdfbe079c9cc3abc8c24562cce64295c287161ea936
- SSDEEP 192:e/zc+8RTWmfB/YPc6K/JPc6h/gPc6X/xPc6r:G4dt/c/K/d/h/k/X/l/r
- TLSH
  T1DBE1CA58E4E0695681B2422BE5E74941EE71C3830E5B4C6CF69FE74B4FB75982223B32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral7 behavioral8
- Target
  CS2-dumper-main/femboy/femboy.vcxproj.filters
- Size 1KB
- SHA256 9d7b526afd25f81cc6e3cb44b1dd5d63daad91af5590d50840cd14359117d023
- MD5 77a9ee260867b14beabcc62a95cb620c
- SHA1 4bcc16a2056c96ed8f9b7b4973e1a989cd20375b
- SHA512 9feeec8a4b47f5f55ee78c8fa107df132d7f8d0a9c42ae9a56b9b73fcc9d253da096823abdf77f0e70056dfde257351fd5396c26aaf1892ddc40d9967db2b0b4
- TLSH
  T146115C2188DC3B482136982BFBC0CA05EF69B2E361D1158576E9D4472BF2318A627764
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral10 behavioral9
- Target
  CS2-dumper-main/femboy/femboy.vcxproj.user
- Size 225B
- SHA256 a0c24e8908c9bcc5eb33cdd38762da3a86013fe87f0c681238ec4bcee56d15e1
- MD5 5e35e02fcaa092f2943bf7b04b02b687
- SHA1 8f7f5c5e803d06ef30739734391f8d4d0c7a1fc6
- SHA512 7a1edc418f72acde0d7d087c04604d7dddb672835c0529e38b15ed5977bba1bde67d3d4d0f41c99cbd37f83e3b50a1fd1a06f981cd6b7b42e5201e2ac7bf83ac
- TLSH
  T156D0A7104140B42071B417349358D834E2E1E6E314B04898F3D0E50D111605950167B3
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution adware discovery spyware
behavioral11 behavioral12
- Target
  CS2-dumper-main/femboy/main.cpp
- Size 16KB
- SHA256 6aa0b8d714f62433f2f09091bf735ace283c97ac7ed39becc554a4216c0d1110
- MD5 67fcc634230b9d0727b18811486f94e0
- SHA1 532f969b1a3db8dbf925b47519303ced861d6903
- SHA512 f9e410086b86cf557666bfcd958437d1af97b715dcfc1795e6bd5125b94c6875d3a77a26f0919c84f89feca2592fc903c5a62a5ec8511c26ca8ad6e64d41b0a7
- SSDEEP 384:cPsVhUcoGeCIa7SLoHEHEVysVApowrLPZKMFbg:cUVhUcoGeCrSLoHEHEksVAKewMlg
- TLSH
  T1C872600D84FB3C122D53753EAB8A500AB926C01367A5CF26FE9E43C07F5B075A6B1667
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14