Analysis
- max time kernel
148s - max time network
131s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/07/2026, 17:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cs2esp.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
cs2esp.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target cs2esp.exe
- Size 525KB
- Sample260723-wkcn2shj21
- SHA256 16bb7c2dba087be84efd4a1c19cf1584f7f3284414641cdf2ca046172f38d217
- MD5 335b4c5f7aed5879f2ec42f3c37e2e4f
- SHA1 89298b17832946d78023563d224719e2750dc377
- SHA512 2180c9babad276960be45f5fc614b717d31ee20e1c6257815642d327a191de5e7f8321a9dba1413d58f508ab009c37f4108d3f48ffb9f14dbfce477c09f70ca8
- SSDEEP 6144:55PP3ZEi7n0t+v94jH4SzDHDll0r+ceCkp05VJ/rGSjizOLwehgiNPUi2nLs08i3:5EYn5vKNgK+AGVNfjiKLAiCRnI0b
- TLSH T15EB49E81F1B957F8E02B9134959AB60FFA353858171055CBA3D4099C2FF27F46AFB222
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe 5932 cs2esp.exe