Analysis
- user interaction
yes - max time kernel
42s - max time network
39s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
23/07/2026, 17:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cs2esp.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
cs2esp.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target cs2esp.exe
- Size 525KB
- Sample260723-wkcn2shj21
- SHA256 16bb7c2dba087be84efd4a1c19cf1584f7f3284414641cdf2ca046172f38d217
- MD5 335b4c5f7aed5879f2ec42f3c37e2e4f
- SHA1 89298b17832946d78023563d224719e2750dc377
- SHA512 2180c9babad276960be45f5fc614b717d31ee20e1c6257815642d327a191de5e7f8321a9dba1413d58f508ab009c37f4108d3f48ffb9f14dbfce477c09f70ca8
- SSDEEP 6144:55PP3ZEi7n0t+v94jH4SzDHDll0r+ceCkp05VJ/rGSjizOLwehgiNPUi2nLs08i3:5EYn5vKNgK+AGVNfjiKLAiCRnI0b
- TLSH T15EB49E81F1B957F8E02B9134959AB60FFA353858171055CBA3D4099C2FF27F46AFB222
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 44 IoCs
pid Process 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe 3848 cs2esp.exe