Overview
overview
3Static
static
1Cs2 Epstein Rage.rar
windows10-2004-x64
1Cs2 Epstein Rage.rar
windows11-ltsc_2024-x64
1Cs2 Epstei...ll.hpp
windows10-2004-x64
3Cs2 Epstei...ll.hpp
windows11-ltsc_2024-x64
3Cs2 Epstei...l.json
windows10-2004-x64
3Cs2 Epstei...l.json
windows11-ltsc_2024-x64
3Cs2 Epstei...dll.rs
windows10-2004-x64
3Cs2 Epstei...dll.rs
windows11-ltsc_2024-x64
3Cs2 Epstei...dll.cs
windows10-2004-x64
3Cs2 Epstei...dll.cs
windows11-ltsc_2024-x64
3Cs2 Epstei...ll.hpp
windows10-2004-x64
3Cs2 Epstei...ll.hpp
windows11-ltsc_2024-x64
3Cs2 Epstei...l.json
windows10-2004-x64
3Cs2 Epstei...l.json
windows11-ltsc_2024-x64
3Cs2 Epstei...dll.rs
windows10-2004-x64
3Cs2 Epstei...dll.rs
windows11-ltsc_2024-x64
3Cs2 Epstei...dll.cs
windows10-2004-x64
3Cs2 Epstei...dll.cs
windows11-ltsc_2024-x64
3Cs2 Epstei...ll.hpp
windows10-2004-x64
3Cs2 Epstei...ll.hpp
windows11-ltsc_2024-x64
3Cs2 Epstei...l.json
windows10-2004-x64
3Cs2 Epstei...l.json
windows11-ltsc_2024-x64
3Cs2 Epstei...dll.rs
windows10-2004-x64
3Cs2 Epstei...dll.rs
windows11-ltsc_2024-x64
3Cs2 Epstei...dll.cs
windows10-2004-x64
3Cs2 Epstei...dll.cs
windows11-ltsc_2024-x64
3Cs2 Epstei...ll.hpp
windows10-2004-x64
3Cs2 Epstei...ll.hpp
windows11-ltsc_2024-x64
3Cs2 Epstei...l.json
windows10-2004-x64
3Cs2 Epstei...l.json
windows11-ltsc_2024-x64
3Cs2 Epstei...dll.rs
windows10-2004-x64
3Cs2 Epstei...dll.rs
windows11-ltsc_2024-x64
3Analysis
- max time kernel
148s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
22/07/2026, 12:36
Static task
static1
Behavioral task
behavioral1
Sample
Cs2 Epstein Rage.rar
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Cs2 Epstein Rage.rar
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Cs2 Epstein Rage/sdk/scenesystem_dll.hpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Cs2 Epstein Rage/sdk/scenesystem_dll.hpp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Cs2 Epstein Rage/sdk/scenesystem_dll.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Cs2 Epstein Rage/sdk/scenesystem_dll.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Cs2 Epstein Rage/sdk/scenesystem_dll.rs
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Cs2 Epstein Rage/sdk/scenesystem_dll.rs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Cs2 Epstein Rage/sdk/schemasystem_dll.cs
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Cs2 Epstein Rage/sdk/schemasystem_dll.cs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
Cs2 Epstein Rage/sdk/schemasystem_dll.hpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Cs2 Epstein Rage/sdk/schemasystem_dll.hpp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
Cs2 Epstein Rage/sdk/schemasystem_dll.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Cs2 Epstein Rage/sdk/schemasystem_dll.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
Cs2 Epstein Rage/sdk/schemasystem_dll.rs
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Cs2 Epstein Rage/sdk/schemasystem_dll.rs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
Cs2 Epstein Rage/sdk/server_dll.cs
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
Cs2 Epstein Rage/sdk/server_dll.cs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
Cs2 Epstein Rage/sdk/server_dll.hpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
Cs2 Epstein Rage/sdk/server_dll.hpp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
Cs2 Epstein Rage/sdk/server_dll.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
Cs2 Epstein Rage/sdk/server_dll.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
Cs2 Epstein Rage/sdk/server_dll.rs
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
Cs2 Epstein Rage/sdk/server_dll.rs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
Cs2 Epstein Rage/sdk/soundsystem_dll.cs
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
Cs2 Epstein Rage/sdk/soundsystem_dll.cs
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
Cs2 Epstein Rage/sdk/soundsystem_dll.hpp
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
Cs2 Epstein Rage/sdk/soundsystem_dll.hpp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
Cs2 Epstein Rage/sdk/soundsystem_dll.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
Cs2 Epstein Rage/sdk/soundsystem_dll.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
Cs2 Epstein Rage/sdk/soundsystem_dll.rs
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
Cs2 Epstein Rage/sdk/soundsystem_dll.rs
Resource
win11ltsc2024-20260709-en
General
- Target Cs2 Epstein Rage.rar
- Size 5.0MB
- Sample260722-ps33msvfkf
- SHA256 a683be0864fe7c118de5297c74b4a5a1b8646b00dea3d49082cce07979c34fdb
- MD5 af987bc2d7cd7406fe4fa3f8486c2cc6
- SHA1 3812f97066e7dbd2af7075120f0fb7404d5dc2c2
- SHA512 36f7553f45848ce78de8f4ace19428e758e426b7fddfee578c77387c0a430660d7788227021478deedd07b1f2116916cfed1c9ab3ac3543b49a894031f285da7
- SSDEEP 98304:oiU/yBqsiU/yBqriU/yBqA8CrrdLV1GqFJ9aIrzV/BCouztqIh:oT/0qsT/0qrT/0qA8CdLfGRI1pCrzZ
- TLSH T17A36339FCCBB182A08537C94BA578630F5B37B92BC906D7ACACD9083154BB33955F921
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3872 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3872 7zFM.exe Token: 35 3872 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3872 7zFM.exe