Overview
overview
3Static
static
311-08-2026...FK.zip
windows10-2004-x64
111-08-2026...FK.zip
windows11-ltsc_2024-x64
1CS2ESP1108...go.exe
windows10-2004-x64
1CS2ESP1108...go.exe
windows11-ltsc_2024-x64
1CS2ESP1108...s.json
windows10-2004-x64
3CS2ESP1108...s.json
windows11-ltsc_2024-x64
3CS2ESP1108...ts.txt
windows10-2004-x64
1CS2ESP1108...ts.txt
windows11-ltsc_2024-x64
1CS2ESP110826/run.py
windows10-2004-x64
3CS2ESP110826/run.py
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
18/08/2026, 15:21
Static task
static1
Behavioral task
behavioral1
Sample
11-08-2026_vhfyP7PAdTxfqFK.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
11-08-2026_vhfyP7PAdTxfqFK.zip
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
CS2ESP110826/cs2go.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
CS2ESP110826/cs2go.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
CS2ESP110826/offsets.json
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
CS2ESP110826/offsets.json
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
CS2ESP110826/requirements.txt
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
CS2ESP110826/requirements.txt
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
CS2ESP110826/run.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
CS2ESP110826/run.py
Resource
win11ltsc2024-20260709-en
General
- Target CS2ESP110826/requirements.txt
- Size 61B
- Sample260818-sraw9adj8x
- SHA256 3949cf576739f076914701085f279e7e8607ca0b3983690836ccf3dd41ce1b83
- MD5 864c59c4f30ddaeeab1a61e8359d0112
- SHA1 b38dfc19c7ca58f9dbc8cf8abd1cf5e82285a617
- SHA512 8ab81e0fe7528fb2f067d2d53052dc89a65aae0c31075761ea24e210268ed653395849d8bed9947540fe426015b60f2d81445753e9f84b67bf5cf25234a6326c
- TLSH T1B8A0025691350BC321F7C527B426D249E58525692535775A364541393615741144535C
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Opens file in notepad (likely ransom note) 1 IoCs
pid Process 4428 NOTEPAD.EXE