Overview
overview
8Static
static
3CS2HexSync...er.sys
windows10-2004-x64
3CS2Unified...or.exe
windows10-2004-x64
1CS2Unified...or.exe
windows11-ltsc_2024-x64
1Launch-Inject.bat
windows10-2004-x64
3Launch-Inject.bat
windows11-ltsc_2024-x64
8Launch-Inject.ps1
windows10-2004-x64
3Launch-Inject.ps1
windows11-ltsc_2024-x64
8drv64.dll
windows10-2004-x64
1drv64.dll
windows11-ltsc_2024-x64
1fva_recon_14167.dll
windows10-2004-x64
1fva_recon_14167.dll
windows11-ltsc_2024-x64
1fva_recon_...59.dll
windows10-2004-x64
1fva_recon_...59.dll
windows11-ltsc_2024-x64
1kdu.exe
windows10-2004-x64
1kdu.exe
windows11-ltsc_2024-x64
1General
- Target kit_attack.zip
- Size 2.3MB
- Sample260826-sqpc9aywfv
- SHA256 a88d6eac3ecbffccf745859ad27bafbbb63e9519370936f003fe9f9010550f31
- MD5 9cff88f9fd069702d5c81700641d0587
- SHA1 d480508c067ea34a11fbe0c425dd3726f0a46022
- SHA512 3b528bb1af4a8827614a74b548c181fbdc986a48bdf9d42c3f36d2ea09588ff117465503a44b84e37fa7e07a491faeb889ff2e17836ff65a731487cbbe8bea74
- SSDEEP 49152:3VsuGESPOGE8h3k5R46xP0rp/XGG32FCWQtGJ1LeIZ/:l7GE4rUv48eNWGGLjzZ/
- TLSH T1E9B5332516DE3E40C9A28BF6D116D9958645A6BEC4E4DCCF1CC5C204BCAA3D73BC1BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
CS2HexSyncCompatDriver.sys
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
CS2UnifiedInjector.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral3
Sample
CS2UnifiedInjector.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral4
Sample
Launch-Inject.bat
Resource
win10v2004-20260513-en
Behavioral task
behavioral5
Sample
Launch-Inject.bat
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral6
Sample
Launch-Inject.ps1
Resource
win10v2004-20260513-en
Behavioral task
behavioral7
Sample
Launch-Inject.ps1
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral8
Sample
drv64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral9
Sample
drv64.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral10
Sample
fva_recon_14167.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral11
Sample
fva_recon_14167.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral12
Sample
fva_recon_24134959.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
fva_recon_24134959.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral14
Sample
kdu.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
kdu.exe
Resource
win11ltsc2024-20260709-en
Malware Config
Targets
-
- Target CS2HexSyncCompatDriver.sys
- Size 16KB
- SHA256 2f2cf4d01e49544ede5e9e4b3b781286653ddcd561938dab4ef77b832083771c
- MD5 02d43dbb907a4cff468d4fcf258f53d3
- SHA1 67fb5e6630295f4f8c5696d86f22ad2db7b2019c
- SHA512 7513d265664f28eb457988703a9b894f06e89eecd6d089fa502f56d901feaa0bdd43f6b4d935912b92541dcad59ac6eb694000da37111cc2d0adad4f8e7f10f9
- SSDEEP 384:WIvz3mZfTGXOKVyTMUy8RbmL4nNyeNqVM:Jv7mVSXAIU5AL3VM
- TLSH T1A9725A6386446AC4EC5FFC38A2D95A13FAB4F1411B5399CB2128C8258FC27C5ADBE358
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target CS2UnifiedInjector.exe
- Size 267KB
- SHA256 a1387d1ad26d922a831733897a5013ba0a2d53faaf306782bce0e5a75b25ea07
- MD5 d074771021a68274ae9ea6585a577084
- SHA1 56fc68778a64b532ec60e9f59dfdbd9727abd4e5
- SHA512 780be603ffa08d37a441f38078ae5458b84ee949d83352d8ce0baf5908a12bd446c061a91196f0d0d84931d79ab26150cfcc83470f5c168b208a5aeaeba3a597
- SSDEEP 3072:Gy6KhaO1rScdNDTf2LigjOJc3/CcWmFyKsokEZD2TD8LfcT8RFJ2:GyVNDTfIJau3/ztfl7J2
- TLSH T132447D15B7A50CFAEDA7813DCD428906EA727C564761EBCF03A04A961F336D09E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Launch-Inject.bat
- Size 455B
- SHA256 e83be68ac7e96ad0e30b1d15f99a0afc80682c33384cad7441630af90adf9856
- MD5 ec9c6c977e787e46793eba3ec0d47e21
- SHA1 9565b0a5f18bbfd5f24bdcea3518ac2de994bab0
- SHA512 ee257f84002ff0ebf1168243daddbe7a4b11841add67eda6370bbda2bd135a5e3a202f938565c0a7d7158afe5faace20c5a752439e5347ebb6f8d8115eea0f50
- TLSH T1EDF05C4931C4827702BBED77642A52616D69926F31155CB434B4E7293A4C5ACCFE4AC4
- MD5 SHA1 SHA512 TLSH
Score8/10-
Modify Registry: Disable Windows Driver Blocklist
Disable Windows Driver Blocklist via Registry.
-
- Target Launch-Inject.ps1
- Size 4KB
- SHA256 fdc345f6ee76cd00f0fa6d72a098118fd454fadcaceb02ae287fe893f63ab86d
- MD5 fa647f7daa710e2271eaf9ca53be6c9a
- SHA1 e05166da2aa98be630f199e31baa4b8477501ed1
- SHA512 6042ef852f4068cbe5ba3109d296c86c901b6e2130d8a7ef2aaa5679f3c1117bd49921e596f1330d3d01017d1214c96b008e0909fd750e13c5e4aafd186094ab
- SSDEEP 96:zicHmVa9p6PzRGcOzodlItm4iV0HdalxNtc8p1+Hsk72U6NbQE:uGea9puGcsodu5iyHdalxNtc8p1+MkK7
- TLSH T1DFB1FA146352447449D2729BCD827B84F96A00DB405E2F68B69CC5BDFFF6B7D4314683
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Modify Registry: Disable Windows Driver Blocklist
Disable Windows Driver Blocklist via Registry.
-
- Target drv64.dll
- Size 2.0MB
- SHA256 eb89b8305b9d07c5a0ef33fbfbd48fe26b89e497d6f4d440ac303f4da030c082
- MD5 2e46e1e9d9ad39f456755558aa8d74c3
- SHA1 3c1d2be5255e562da31c669b4599791688e589fd
- SHA512 9684edbbf1d3199ccebff9199cdb14ca2253516c24e8f384254ef185e9541cef921a6b6db92efcc3d08a0c869c554bb1631a4b0dba6f9b156db2096aee326a97
- SSDEEP 49152:F+gKzUIG0f9M134y/Pc4/YaX2BGeO38n9bu:F+gWxq94uFQamtd
- TLSH T16595336917D93D41E4B2CBB1D8B696118654FD79C4F4E94E2C84820CAEB33C73A81BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target fva_recon_14167.dll
- Size 37KB
- SHA256 e18a1103ed437cbe6fe8d6a2ff309b77f0c664164bd0fe700fe04af050987dc8
- MD5 3c3c6afb19e6b1946c62cb0766b07a47
- SHA1 9421b8e8463bac82e48f38f3e2282d0c920a86a1
- SHA512 fbd1b7204a351b8fc16f4c2a2a7a590aa901013d6a1821761d667eb0fbdfdef6b85d5663e948e077afc5c35420bb872f1c52ba1bfd23fbdd3365febd42e5ebe5
- SSDEEP 768:ibpfcx1Xa1/uxCUXxpD468QIcv7itoA3q:afOXa1/uxCUXx5pIcvBA
- TLSH T1AB037D0DB78000EDD562C0B8CAA66E9EE2B8B01693A1A7DF73F443691F573C6593E701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target fva_recon_24134959.dll
- Size 9KB
- SHA256 2f236d619b15270e4befca2b939759f575277ca34bac2584f773f5ee7410efcd
- MD5 8b4cae6ed51b50997ae9c427bfd2da4b
- SHA1 69c824d223361d0c98c5a852403142247fcb235d
- SHA512 af35144728346d26f03c44ed1250ce37c9ce5acb17d296eb2fe161ffcc91c1c3c8ba897ecb8b227a6a231285a6d0e68d19e6ac0bba328b9699f21b8f52623085
- SSDEEP 96:8EQMOlJl2v0BdGlEEUyOa7ZucqjXpl4oTzo2q8BMTBDSCI:BOt2eURcbxM2POB
- TLSH T11A120AC9FAA109EED66582B8C5235E4862B9FF21079213CF4331F12A2D137CB6779B45
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target kdu.exe
- Size 398KB
- SHA256 dd68cec0997bf3424507b2d2d828b29366685fee9bfa3ee1f8f5589f429e39f9
- MD5 ddc02034532c33bdab53eeecdfbf6ed2
- SHA1 f5ad15568c61188f1261214eee61acad8b801064
- SHA512 dcc755dbe85c854fdbe7f56b923e755aedf8bcc55b953261b241847343a9443dc8e509d9bbc85d4b77dd0d912f9f03003df5cdb38c731cc5162157a16e8ed369
- SSDEEP 6144:VFInirPnmM8Nrhx/ahBgvpdwLgGBRuqXO7vHfylvZWsFo5:VFI26Nrb/ahUQjlBRFQ
- TLSH T193849F15E39510E9E8A3C13DC991C606EBB2BC560320DB9F13A466597F337D1AE3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10