22-07-2026_Zy7tDpauMaI96j9.zip
- SHA256 f2399e0d4795b3b516a6237d040d5af5d414ded456def1467cefa3136b049161
Password
123
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
22-07-2026_Zy7tDpauMaI96j9.zip
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
CS2ESP210726/cs2go.exe
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
CS2ESP210726/offsets.json
Resource
win11-20260513-en
windows11-21h2-x64
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
CS2ESP210726/requirements.txt
Resource
win11-20260513-en
windows11-21h2-x64
5 signatures
150 seconds
Behavioral task
behavioral5
Sample
CS2ESP210726/run.py
Resource
win11-20260513-en
windows11-21h2-x64
4 signatures
150 seconds
General
- Target 22-07-2026_Zy7tDpauMaI96j9.zip
- Size 986KB
- Sample260722-qtyd8aam61
- SHA256 f2399e0d4795b3b516a6237d040d5af5d414ded456def1467cefa3136b049161
- MD5 d2c41f49918858c6163c3ef002a73c47
- SHA1 0db32bf7f743200d6905c5093de55a433f71df31
- SHA512 a92b1c7e2ea556d9db129eb49990c84dce4eca83cb013d6da31433337b40df645698d51d945a6a4c7c72b815cc745b3e84b2212a3c7fe2e609a04da10ce614ba
- SSDEEP 24576:WKLcY5/Y/IYsB0Yo21OBfduK5FLIyS6rvOryOycII:nRy/7u0eOBcELq6rvmyllI
- TLSH T1A525337728B40FCCDD2EE43BE2BD2991366195797F6AD5FEA0A0862C2FD1D9414C00DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/CS2ESP210726/cs2go.exe
File Explorer
-
22-07-2026_Zy7tDpauMaI96j9.zip.zip 986KB
-
CS2ESP210726/CHEATER.FUN.url46B
-
CS2ESP210726/cs2go.exe.exe 2.3MB
-
CS2ESP210726/offsets.json372B
-
CS2ESP210726/requirements.txt61B
-
CS2ESP210726/run.py3KB
CS2ESP210726/CHEATER.FUN.url
- SHA256 016e97e28f1b9dc53eec83bff19b249682dbc695f40840261c1f0f42b08f3c32
- MD5 ff08f90a8c84c9a07e3a9f99225852a2
- SHA1 bef8efaac1e01dafd8951f7ceca3adcc2152eab2
- SHA512 475bc83262577b2adc705150555af298fe60f85468d0b210202c43a6b1f7ccf7aed3c7a0aaa154caf12e655035ad94ea17ed00eae05aed948e312d8289c30144
- MD5 SHA1 SHA512
CS2ESP210726/cs2go.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 1564ba084b73aee3bafbdaf2491d9e05fe03a9240ea0aa92f31190a71c2db459
- MD5 af2a2f6df598f31c0ef1db53f6d60ff2
- SHA1 ea70e190b904e89b9669cd591b70fa4502b33c90
- SHA512 91304c12236f959d68c8799cc2704d343e073d598de83b9315ab17cb253047e31be21c93052be48ed06460097f0f02ffd2d7d3449f6559b3767101faab3960f9
- SSDEEP 24576:3Q46p/48sI9Ruuq/R00i7hgKFGFBX7AkWqZj5EmgM6S6elejC9zEEXICubrW0Zz:3Q469/sHuqp7OlAx8khj55WQUP
- TLSH T136B55B0BBCA105E9C4AE92318A72A5527B71BC480F3067E73EA0B7382F76BD05D79754
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
123
Minor OS version
1
Major OS version
6
Entry point
486496
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
1006KB
Virtual Size
1006KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
102KB
Virtual Size
399KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
CS2ESP210726/offsets.json
- SHA256 49bdd026497ee8eb1a0d1972693cef42caba03cccf20e60d93158bb8d6582a37
- MD5 2077b54a9b550487e23e20ba8543f5bb
- SHA1 a737ef727860e66258d553d104b3d9fd40766860
- SHA512 fc998784a697c0bdd0387acbb64b06db1afd80a770d4f405eb8cb1c03c522551c98b313aa4b9970100139ab8257c7d9e70c983c187664b8d114fb34f4c031b8d
- TLSH T110E02644C22D8CCBBBBC1C4528D42581D380132F6048682BF3B8ED8DCF78ABE085B10A
- MD5 SHA1 SHA512 TLSH
CS2ESP210726/requirements.txt
- SHA256 3949cf576739f076914701085f279e7e8607ca0b3983690836ccf3dd41ce1b83
- MD5 864c59c4f30ddaeeab1a61e8359d0112
- SHA1 b38dfc19c7ca58f9dbc8cf8abd1cf5e82285a617
- SHA512 8ab81e0fe7528fb2f067d2d53052dc89a65aae0c31075761ea24e210268ed653395849d8bed9947540fe426015b60f2d81445753e9f84b67bf5cf25234a6326c
- TLSH T1B8A0025691350BC321F7C527B426D249E58525692535775A364541393615741144535C
- MD5 SHA1 SHA512 TLSH
CS2ESP210726/run.py
- SHA256 9695a3b0bc64f13caac8000b3bd8e914133e2d0eff6aa16ace4cbfc7512f57f6
- MD5 7a89f0accc3257e5d21f1a8ec8b29080
- SHA1 02df8b0407965d30c3ba41c41fd8979874630bab
- SHA512 8acb85ce9bd63998f4efdcb71675cdfbade3ea1722c71a3057e2a4b528b6ed72bd57ea2e60e5d39c853911adbd44cd11f0dd2c3a08bd7aeae5cc39756c354941
- TLSH T195518B2BDD2E195546F05E2FA40A9063EFCA012B9BA90972BCACC2542F35926117D63F
- MD5 SHA1 SHA512 TLSH