Overview

overview

8

Static

static

3

Counter-St...e9.rar

windows10-2004-x64

7

Counter-St...e9.rar

windows11-ltsc_2024-x64

8

Counter-St...2).exe

windows10-2004-x64

7

Counter-St...2).exe

windows11-ltsc_2024-x64

7

Counter-St...l).reg

windows10-2004-x64

1

Counter-St...l).reg

windows11-ltsc_2024-x64

1

Counter-St...RO.txt

windows10-2004-x64

1

Counter-St...RO.txt

windows11-ltsc_2024-x64

1

Counter-St...ix.reg

windows10-2004-x64

1

Counter-St...ix.reg

windows11-ltsc_2024-x64

8

Counter-St...CS.url

windows10-2004-x64

1

Counter-St...CS.url

windows11-ltsc_2024-x64

8

Counter-St...la.reg

windows10-2004-x64

1

Counter-St...la.reg

windows11-ltsc_2024-x64

1

Counter-St...3d.reg

windows10-2004-x64

1

Counter-St...3d.reg

windows11-ltsc_2024-x64

1

Counter-St...gl.reg

windows10-2004-x64

1

Counter-St...gl.reg

windows11-ltsc_2024-x64

1

Counter-St...68.reg

windows10-2004-x64

1

Counter-St...68.reg

windows11-ltsc_2024-x64

1

Counter-St...24.reg

windows10-2004-x64

1

Counter-St...24.reg

windows11-ltsc_2024-x64

8

Counter-St...20.reg

windows10-2004-x64

1

Counter-St...20.reg

windows11-ltsc_2024-x64

8

Counter-St...80.reg

windows10-2004-x64

1

Counter-St...80.reg

windows11-ltsc_2024-x64

1

Counter-St...00.reg

windows10-2004-x64

1

Counter-St...00.reg

windows11-ltsc_2024-x64

8

Counter-St...ll.url

windows10-2004-x64

1

Counter-St...ll.url

windows11-ltsc_2024-x64

1

Resubmissions

25/08/2026, 18:20

260825-wyytfatycy7

25/08/2026, 18:01

260825-wlx2daxbqa8

Sharing

Copy URL Twitter E-mail

General

  • Target
    Counter-Strike 1.6 2018 Clássico (v4.2) by onixs e Blaze9.rar
  • Size 258.1MB
  • Sample260825-wlx2daxbqa
  • SHA256 8f707db54cd680dbdf983c1f78f1c96aa1b0c6d0e631a16a660f5e1be8797372
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarebootkitdefense_evasiondiscoveryexecutionpersistenceransomwarespywaretrojan

Malware Config

Targets

    • Target
      Counter-Strike 1.6 2018 Clássico (v4.2) by onixs e Blaze9.rar
    • Size 258.1MB
    • SHA256 8f707db54cd680dbdf983c1f78f1c96aa1b0c6d0e631a16a660f5e1be8797372
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    bootkitdefense_evasiondiscoveryexecutionpersistenceransomwaretrojanadwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks whether UAC is enabled

      defense_evasiontrojan

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Network Service Discovery

      Attempt to gather information on host's network.

      discovery

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2
    • Target
      Counter-Strike 1.6 2018 Clássico (v4.2)/Counter-Strike 1.6 2018 Clássico (v4.2).exe
    • Size 258.7MB
    • SHA256 28e0d1cf3644eac91f39d8c7bc244d50149e1c4053b78f02aeae8cab58471751
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral3behavioral4
    • Target
      Counter-Strike 1.6 2018 Clássico (v4.2)/Ferramentas/Mouse Fix/CPL Mouse Fix (Original).reg
    • Size 381B
    • SHA256 ad9e9b34ec4f48b4472ed9a296b36dd531acfeb32e8a86e98216e1977723600c
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      Counter-Strike 1.6 2018 Clássico (v4.2)/Ferramentas/Mouse Fix/LEIA-ME PRIMEIRO.txt
    • Size 223B
    • SHA256 89507ab13745a9fa71bddc45e2e90e6f0a01612db61b3985cf20b2e61095f4e5
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      Counter-Strike 1.6 2018 Clássico (v4.2)/Ferramentas/Mouse Fix/Remover CPL Mouse Fix.reg
    • Size 370B
    • SHA256 e6dbc80b966da03be076202d48a96eb993b33261a5c6bd54668904b0d74f2fcb
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral10behavioral9
    • Target
      Counter-Strike 1.6 2018 Clássico (v4.2)/Ferramentas/Outros/Servidores de CS.url
    • Size 128B
    • SHA256 5d838cab1c8699673fbe684f74e59b700eeb351eb92b481db992bbe84c2c92e8
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral11behavioral12
    • Target
      Counter-Strike 1.6 2018 Clássico (v4.2)/Ferramentas/Qualidade de Imagem/Rodar em Janela.reg
    • Size 126B
    • SHA256 f9144bc1164177959d508a1970d596c8eb22f8905754ab1f7f9b08f19e28a922
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral13behavioral14
    • Target
      Counter-Strike 1.6 2018 Clássico (v4.2)/Ferramentas/Qualidade de Imagem/direct3d.reg
    • Size 256B
    • SHA256 17c250b6c64d4b5a8ddedbdde4095c0a4f95df9a9961834377d8a18517917d58
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral15behavioral16
    • Target
      Counter-Strike 1.6 2018 Clássico (v4.2)/Ferramentas/Qualidade de Imagem/opengl.reg
    • Size 256B
    • SHA256 5fcb7e0fabbed9102926b05ddffd7e515ac48442b26444ae007ec927854c569f
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral17behavioral18
    • Target
      Counter-Strike 1.6 2018 Clássico (v4.2)/Ferramentas/Resoluções de Tela/1024x768.reg
    • Size 314B
    • SHA256 6f074f49d6751f80277c086b542eb328985367d5236a59f6c4a1ac93c5cddd83
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral19behavioral20
    • Target
      Counter-Strike 1.6 2018 Clássico (v4.2)/Ferramentas/Resoluções de Tela/1280x1024.reg
    • Size 314B
    • SHA256 038948edd4c5346477067b568304ad8063267d3c449d817af0563c08829050bb
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral21behavioral22
    • Target
      Counter-Strike 1.6 2018 Clássico (v4.2)/Ferramentas/Resoluções de Tela/1280x720.reg
    • Size 314B
    • SHA256 218717c3bef87949b70da9b3a16d96b9740ce24452c13ee20918551bccc58bc4
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral23behavioral24
    • Target
      Counter-Strike 1.6 2018 Clássico (v4.2)/Ferramentas/Resoluções de Tela/640x480.reg
    • Size 314B
    • SHA256 0554b4423cafb8dd862978539e22878b51db86b7b3699fde040d4413f13af0c7
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral25behavioral26
    • Target
      Counter-Strike 1.6 2018 Clássico (v4.2)/Ferramentas/Resoluções de Tela/800x600.reg
    • Size 314B
    • SHA256 1895040dd1de337369e53645d13e96db1d4d5fd9a1d8aa5e262022ac63932080
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    adwarepersistenceransomwarespyware

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral27behavioral28
    • Target
      Counter-Strike 1.6 2018 Clássico (v4.2)/Fórum MonsterSkill.url
    • Size 170B
    • SHA256 8d1fc030dcda2e80d5817ad49040653fbf7beb52b054ccd5d8b595bbbee42bbe
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    behavioral29behavioral30

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

1
T1059

Windows Command Shell

1
T1059.003

Persistence

Boot or Logon Autostart Execution

1
T1547

Active Setup

1
T1547.014

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Active Setup

1
T1547.014

Defense Evasion

Hide Artifacts

1
T1564

Hidden Files and Directories

1
T1564.001

Modify Registry

2
T1112

Pre-OS Boot

1
T1542

Bootkit

1
T1542.003

Credential Access

Discovery

Browser Information Discovery

1
T1217

Network Service Discovery

1
T1046

Peripheral Device Discovery

2
T1120

Query Registry

6
T1012

System Information Discovery

7
T1082

System Location Discovery

1
T1614

System Language Discovery

1
T1614.001

System Time Discovery

1
T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

Score
3/10

behavioral1

bootkitdefense_evasiondiscoveryexecutionpersistenceransomwaretrojan
Score
7/10

behavioral2

adwarepersistenceransomwarespyware
Score
8/10

behavioral3

discovery
Score
7/10

behavioral4

discovery
Score
7/10

behavioral5

Score
1/10

behavioral6

Score
1/10

behavioral7

Score
1/10

behavioral8

Score
1/10

behavioral9

Score
1/10

behavioral10

adwarepersistenceransomwarespyware
Score
8/10

behavioral11

Score
1/10

behavioral12

adwarepersistenceransomwarespyware
Score
8/10

behavioral13

Score
1/10

behavioral14

Score
1/10

behavioral15

Score
1/10

behavioral16

Score
1/10

behavioral17

Score
1/10

behavioral18

Score
1/10

behavioral19

Score
1/10

behavioral20

Score
1/10

behavioral21

Score
1/10

behavioral22

adwarepersistenceransomwarespyware
Score
8/10

behavioral23

Score
1/10

behavioral24

adwarepersistenceransomwarespyware
Score
8/10

behavioral25

Score
1/10

behavioral26

Score
1/10

behavioral27

Score
1/10

behavioral28

adwarepersistenceransomwarespyware
Score
8/10

behavioral29

Score
1/10

behavioral30

Score
1/10