11-08-2026_vhfyP7PAdTxfqFK.zip
- SHA256 302a2765a925f4a674071c75d64d68fa98275ee7b5e32afa3c045f8eb6bbfa04
Password
123
Overview
overview
3Static
static
311-08-2026...FK.zip
windows10-2004-x64
111-08-2026...FK.zip
windows11-ltsc_2024-x64
1CS2ESP1108...go.exe
windows10-2004-x64
1CS2ESP1108...go.exe
windows11-ltsc_2024-x64
1CS2ESP1108...s.json
windows10-2004-x64
3CS2ESP1108...s.json
windows11-ltsc_2024-x64
3CS2ESP1108...ts.txt
windows10-2004-x64
1CS2ESP1108...ts.txt
windows11-ltsc_2024-x64
1CS2ESP110826/run.py
windows10-2004-x64
3CS2ESP110826/run.py
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
11-08-2026_vhfyP7PAdTxfqFK.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
11-08-2026_vhfyP7PAdTxfqFK.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
CS2ESP110826/cs2go.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
CS2ESP110826/cs2go.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
CS2ESP110826/offsets.json
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral6
Sample
CS2ESP110826/offsets.json
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral7
Sample
CS2ESP110826/requirements.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
CS2ESP110826/requirements.txt
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
CS2ESP110826/run.py
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral10
Sample
CS2ESP110826/run.py
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
General
- Target 11-08-2026_vhfyP7PAdTxfqFK.zip
- Size 986KB
- Sample260818-sraw9adj8x
- SHA256 302a2765a925f4a674071c75d64d68fa98275ee7b5e32afa3c045f8eb6bbfa04
- MD5 0715f78fb5dd5898647bf20604391b2d
- SHA1 e3f92868216b5881ebe7c0da09cd220a02b7d2cf
- SHA512 428fb32408e0a892eb7e847c018343962ad5283e14d4776448284b7319a3d8190421176c63b17e0833011fcd1e27ccb59fac3c470a4613ba8b5ce20cb9f8c53e
- SSDEEP 24576:HISY90g7Qc9imOUxXRWevbYqHacTYk3HV57QiU3ToBsQoG1Te:oD9j046UxXRWOYmrpXV+iWoBbb1a
- TLSH T12D253364865EAAC949F5BFD05CE81128B11F51E3A1C6F530255FDF2BCEA022EE4E10ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/CS2ESP110826/cs2go.exe
File Explorer
-
11-08-2026_vhfyP7PAdTxfqFK.zip.zip 986KB
-
CS2ESP110826/cs2go.exe.exe 2.3MB
-
CS2ESP110826/offsets.json372B
-
CS2ESP110826/requirements.txt61B
-
CS2ESP110826/run.py3KB
CS2ESP110826/cs2go.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 1564ba084b73aee3bafbdaf2491d9e05fe03a9240ea0aa92f31190a71c2db459
- MD5 af2a2f6df598f31c0ef1db53f6d60ff2
- SHA1 ea70e190b904e89b9669cd591b70fa4502b33c90
- SHA512 91304c12236f959d68c8799cc2704d343e073d598de83b9315ab17cb253047e31be21c93052be48ed06460097f0f02ffd2d7d3449f6559b3767101faab3960f9
- SSDEEP 24576:3Q46p/48sI9Ruuq/R00i7hgKFGFBX7AkWqZj5EmgM6S6elejC9zEEXICubrW0Zz:3Q469/sHuqp7OlAx8khj55WQUP
- TLSH T136B55B0BBCA105E9C4AE92318A72A5527B71BC480F3067E73EA0B7382F76BD05D79754
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
123
Minor OS version
1
Major OS version
6
Entry point
486496
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
1006KB
Virtual Size
1006KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
102KB
Virtual Size
399KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
CS2ESP110826/offsets.json
- SHA256 3dab3b4cbeb1c8c190c1d0a7b1ddd8552b5d169f26a325f5e9ca3c4b0d9cf602
- MD5 48923d84416b1234c514f0904a70523b
- SHA1 1202db4fc24190f1eb72d53c36a586816d3a2138
- SHA512 a210bee4e7112926ea271646374cac29508ffb9d27e3a7eeb6a99254fe69932eb78683a29f948ee5fce25b1b3f56951a68a25690223b1c68941fccd4a93e5e49
- TLSH T1D7E02604C36E8CCBBBFC1D842CD81580D380032B6088A82FB3B4ED8D8F3897E084710A
- MD5 SHA1 SHA512 TLSH
CS2ESP110826/requirements.txt
- SHA256 3949cf576739f076914701085f279e7e8607ca0b3983690836ccf3dd41ce1b83
- MD5 864c59c4f30ddaeeab1a61e8359d0112
- SHA1 b38dfc19c7ca58f9dbc8cf8abd1cf5e82285a617
- SHA512 8ab81e0fe7528fb2f067d2d53052dc89a65aae0c31075761ea24e210268ed653395849d8bed9947540fe426015b60f2d81445753e9f84b67bf5cf25234a6326c
- TLSH T1B8A0025691350BC321F7C527B426D249E58525692535775A364541393615741144535C
- MD5 SHA1 SHA512 TLSH
CS2ESP110826/run.py
- SHA256 9695a3b0bc64f13caac8000b3bd8e914133e2d0eff6aa16ace4cbfc7512f57f6
- MD5 7a89f0accc3257e5d21f1a8ec8b29080
- SHA1 02df8b0407965d30c3ba41c41fd8979874630bab
- SHA512 8acb85ce9bd63998f4efdcb71675cdfbade3ea1722c71a3057e2a4b528b6ed72bd57ea2e60e5d39c853911adbd44cd11f0dd2c3a08bd7aeae5cc39756c354941
- TLSH T195518B2BDD2E195546F05E2FA40A9063EFCA012B9BA90972BCACC2542F35926117D63F
- MD5 SHA1 SHA512 TLSH