6944d0d312e9a46d3eead32a32e906ac5d1b03b7bae165bcd132d50a5bb8dec3

Sharing

Copy URL Twitter E-mail

General

Target
Cs2Hack.zip
Size 73.4MB
Sample260828-x2bzhssepd
SHA256 6944d0d312e9a46d3eead32a32e906ac5d1b03b7bae165bcd132d50a5bb8dec3
MD5 14c105e0818904b259303dc50f3f98ec
SHA1 607019ad8bd3a9ab550d2ad64772eb8863ba3619
SHA512 5f4f4c5f34066dedb078e5575eadc576fca0e32e5289966d1b9140c4fc6e6afc97726430e0a4b70023625ae35cb0eec66b22cd93e9f729b113d2e055ce9ccb3d
SSDEEP 1572864:ydxaVSH8F2zzSaJDy+iMNTa6mxNAxGZWTp5HXkKZhzvZ/nENO:caMe2r9pN23AxGMPxNEM
TLSH
T1FFF73322521E94A8DEF2BAFB8551F74236B8F3D3895C280BD8DEA0A313F587114D5F85
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Targets

- Target
  Cs2Hack.zip
- Size 73.4MB
- SHA256 6944d0d312e9a46d3eead32a32e906ac5d1b03b7bae165bcd132d50a5bb8dec3
- MD5 14c105e0818904b259303dc50f3f98ec
- SHA1 607019ad8bd3a9ab550d2ad64772eb8863ba3619
- SHA512 5f4f4c5f34066dedb078e5575eadc576fca0e32e5289966d1b9140c4fc6e6afc97726430e0a4b70023625ae35cb0eec66b22cd93e9f729b113d2e055ce9ccb3d
- SSDEEP 1572864:ydxaVSH8F2zzSaJDy+iMNTa6mxNAxGZWTp5HXkKZhzvZ/nENO:caMe2r9pN23AxGMPxNEM
- TLSH
  T1FFF73322521E94A8DEF2BAFB8551F74236B8F3D3895C280BD8DEA0A313F587114D5F85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  Cs2Hack/Dependencies.manifest
- Size 1.1MB
- SHA256 f321146ce5c90b3f7189f1829805b7c29efdd615b18ea2b236ad77e516788f19
- MD5 7a6f14046ab94609e0f2d589fc4d89e0
- SHA1 912549c4a4acda50d655893efa391426e2aedb1e
- SHA512 b2d1eb2b3dffd3694aaae72974b7d0d1b1021a34a2882cfde367db1443edcf28ead61d8125b14bbadfb78cf4923d88f860995f2c82f2acaffb21b0f7755c0939
- SSDEEP 24576:Q5JaC9T5jElUECf2dn5IZ/Kr6sItslhSsYxEomKBzRErk2IfdUk3v/:oaC55gl/a2TgbNtehPYxEC/EY9fdUkf/
- TLSH
  T16A3533FB93600715F109D9BCF34B449EA056A3DD5B19A73334727DBE29288263F6D844
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral2
- Target
  Cs2Hack/Qt5Core.dll
- Size 5.8MB
- SHA256 aea8383f65307e0fb5f450c9b705363ad55c417eb240dc8633dab09c3dc348a4
- MD5 463037c6f585124f08dc343b18c23bc2
- SHA1 5b1a66b382040c4c437d2d8cdded52f219bec502
- SHA512 500a32bdfdca26f9d1936f292d725f27522385eba852bf7c8ea0de53de03a95a508d136c66741b62f79267dada3af377cbaa7a1ba05a2b44cabbcaa135c28a4f
- SSDEEP 98304:JpBRmydxhXqEQPoSJf5Jsv6tWKFdu9CFIXl741rqf:PXm6xh6EQwiJsv6tWKFdu9C+17Qrqf
- TLSH
  T1B0567C57B7AA0091D076C23CC9EB8256F6B2B4115B328EDF1259624D5E733F0A93F31A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  Cs2Hack/locale_data/cs/alert_messages.json
- Size 35KB
- SHA256 ccd84a88d86bea9d2b680407eee8f88e34cfb3a47c7c2b87e6ac9de98084b4f4
- MD5 be2b0f67044246a74876d6fb678fc16f
- SHA1 9465ac1269b32bd1034e25c948cb0631063d348f
- SHA512 ec54f36762224c5a44653029d4bb4e596dfc9f96f70353d98e5dedf1fa061c122846bee70e74baac6fac5fa729fa290dc7808c481a86832d6e05fafaeb3c4c22
- SSDEEP 768:dBvv2eDfuJe09HJq3gOWzQECOQ8Oo8+Wx/3fPvK3ir+5wlIEvrgiDk/D9G72AvM/:dBvlfuvJtPQFZ5fB+qsdD9GSL/
- TLSH
  T1A1F26334C64E0B3B0293518AD04E12D3221E55674B5B31A677A9D21C3ADE09FA3BB5FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral4
- Target
  Cs2Hack/locale_data/cs/captions.json
- Size 24KB
- SHA256 8c4a16ca38a61e6d4887caf89d9382b63a63ab0c7aea5430937086e6e0a23017
- MD5 d553712ccce3905ea0084761cdcc455e
- SHA1 2e153b868bf70e9d2ae4dda9e78a3b21f18f837c
- SHA512 de35bdb0e90ed8f82fef92dd8697286efd3e5297789fc49ed2a903fc9b31037cc231f80db8386ec456c8d1b8cd19a715d42210ef5186fd7d172f4ad314dab148
- SSDEEP 768:n5xjFfKSxyCcKFIACKl3VTW+xI2xM0ODPuI+TE5+MAe4i:TFzz3gsJ/DTppM
- TLSH
  T1D9B27130C64E4B37029351CFC04E22E3515E596B5B5B32A57699D21C2AAF04FA3BA1FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5
- Target
  Cs2Hack/locale_data/cs/hint_lines.json
- Size 3KB
- SHA256 e9e074a7133d6ca80979e15fe78a79cba8227b9fb8c3825433c9fe552eb08b82
- MD5 93cff97afa9b7aa367bb9ae62febab9c
- SHA1 e8869dfb57d26eb3e2ca71ebd35fc175409b16f5
- SHA512 90bd521bdca6abc7f0bd357a28a246f9ed4adf4fb346ff5c5b5d66bc47e0f33d068f71b7c0da967026efab84d5ea4fc80cf5537091af6a8970186a280a68636a
- TLSH
  T131813234C94D0B3B009350CBC09D12A7216E596B5B2B31A672A5D10C7BEE19F63BA0FF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral6
- Target
  Cs2Hack/locale_data/cs/popup_text.json
- Size 45KB
- SHA256 3992d24f43e5d04913dffc05531683a9c7dea34eba2d2ab0c501cf67385cda55
- MD5 174ad4e607d18cf9c23ac75a380d6a78
- SHA1 febbac095acd8bbc960e8ccfe088ba5ac9dd1bc0
- SHA512 4aef62eece862527dec0d118452f931d83b11cbc21dfd39d7bf6fb1c73daf81275ba235a87aae3e0f44825e1a7a6c438051e74ab7ceef3d161f917ee1e031b90
- SSDEEP 768:8K8rZ7NtJ4DIa84zkIRZzxZi2H8noKgzAhiVx9c9P8BJSek7eWC4mWVTfQgGkAKw:8p7NrIJBRLgwtMicJ8BJSHiWC6VfIKdU
- TLSH
  T199238430C64E4B3B0293418AD04E12D3212E596B5B57726573A9D21C6AEF05FA3BB4FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7
- Target
  Cs2Hack/locale_data/da/feedback_lines.json
- Size 3KB
- SHA256 6b1847662974d7f0c13a7984a54cd7e6e3bc833ad7a5c13a38809a6a922674b7
- MD5 68ff9c08e54028a57afa95b7045c7042
- SHA1 ae92a711fcda9fc175a84d5d0f111e4f714f18e3
- SHA512 6121b4a8275c0c9ef9880e345dbbcd101324aaacf5eb8a3df23091e0e886e5c7a6e48e8de7bb9e7557ae6ab053b36b9702eeec4d17ec1183be838347e1f5d356
- TLSH
  T17781A671C24D0B3B029252CFC04E31E3515E996B5B1B32E13B9AD20C6A5E05E577A4FE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral8
- Target
  Cs2Hack/locale_data/da/hint_lines.json
- Size 3KB
- SHA256 a8cb31c283aecd4365c8d602dfbc883fbd68f0c3d15f314162f128bf048b0648
- MD5 3d26829f7c9c4d94bd5ba2d0847c2110
- SHA1 d937db63fb92f0bae547e05343dd63e05470abb5
- SHA512 b6ce8acbcc3e48527aa96a106e9c70fd10981afb758ebeb851e5bc61f44c73168ed6851309f785996fcc5ae845258ca59da91aa4228515ca54798278a617f365
- TLSH
  T1DD818334C58E8B3B0593418A948E13D3510E5A2B5B27326573E9D21C29DF49FA3BA4FF
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral9
- Target
  Cs2Hack/locale_data/da/labels_ui.json
- Size 15KB
- SHA256 e60464d7866b89c22271c03b6b72c2c53bdad6c1e6189043e153eeb83d3a9491
- MD5 259bf615af75f0c1172a4be3c3a7b3be
- SHA1 870af5364d26977be699e665f8b0a04830eb7f11
- SHA512 8dff7986d57a2aae9af0f06bb9dcaff4a786bb56d7ca952176af3cc4dfbbf271d7c66def5b2b190684a325194cbd58562c11c16054328b11ddce08a94da5a12b
- SSDEEP 384:RzYibBgbcqulzYY+FJXG9uuFjGTqo/qNRDN:RzYeucqulz4FJXG9vFjGTHqNRDN
- TLSH
  T139624034D60E0F3B029301CAC45E11E3212E55AB1B5B71A57799D21C3AEE09F93BA4FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10
- Target
  Cs2Hack/locale_data/da/menu_entries.json
- Size 24KB
- SHA256 4f2de44fa20a06e15288458b2554a00b6ca959a5f74e517ecf175f7c14a33917
- MD5 2a504442504fa095d1b9e819d1fc04dc
- SHA1 f58672216919307acd9e9a00c06bfa4263cfa23e
- SHA512 61817823b5be3e51a395273c8147913fb3d44f3a46047afd7b7bcd44e7e1c88c6f185300ebe14cd1d828ee87f0918cea8c5eebdf30904e361ec8d470348b4ae7
- SSDEEP 768:SK9xzu18GpLPuaThM2eWuitlUTYRWgdgMLa1SpFoxAvER0j/:SWxC1xpSswkRWgoAsR2
- TLSH
  T136B27334C64E0B370293518BD49E11D3222D59674B0B31A577A9D21C6AEF05FA3BA1FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11
- Target
  Cs2Hack/locale_data/da/popup_text.json
- Size 24KB
- SHA256 d313fa3818c7b24440d54bbf6a1805a0962b7b91348a66df0fd3a2add2010e3c
- MD5 460d89f8e761b9a066f8911323eac6d3
- SHA1 8c3a76a08c9a5cb3800ab897e90528f21527d119
- SHA512 2f1599a496f98fd5326da16613f5404e64a49f790de8dced6e50896d32032850bb3c319988a85a47fca3d9e3c07e29f83d181901587215de323a889b96349b3f
- SSDEEP 768:MRicYGWYcActtZS8pc7oRPJkdF+9a6DTehAXjP0c3c:MJYJt5pc8P2s97ChAXjPZ3c
- TLSH
  T16BB27534C64E0B3B065341CE805E22D3611E596B4B5B31A973E9D21C6AEF05F93BA0FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  Cs2Hack/locale_data/de/alert_messages.json
- Size 8KB
- SHA256 e60ce3c96abb7474db177fa906e655e814e29ea2810a201f430a17705ef40a35
- MD5 6e29a63aace16c148d16f11c25e15657
- SHA1 063a908264d22bdc709192814834cbdb918de963
- SHA512 8af931d40fae480ca382803c2afada3a44d710242cb848a606a4f2ca509f31296ff1fe5db948f7775fa5bc993085760e848d7f7762e82529056b41e11de72aa0
- SSDEEP 192:YfI4uyQy26PqXcH32zJWA1+3CWxpaTeCFxGTB57i6Rw2tMVR1:PynaoMN+SopazmB57rDtYR1
- TLSH
  T15A027470C24A0B3B069751CEC04A61E3612E99274B17616973A9C25C7ADF05FA3BB4FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  Cs2Hack/locale_data/de/hint_lines.json
- Size 24KB
- SHA256 1586a9098d1043cac3d161707955e3740b062c4c0d21d6ee0294101b4a51d983
- MD5 00ce5e200db9c0fed5465d71224b390f
- SHA1 3c9d50cb45f25c6154c0bf703de5286c8d481dcc
- SHA512 dcc54eb9134f865ac387accd322e7911ae2e4d03e23354d99624900371e9e82d3626397d83656aa292807ec75c5ecfa67bd670ae5279c4760e247b842aa59769
- SSDEEP 768:7hX2yNnU1ALgDANIiS0eeMtJhFUNRgNYXm76X1LOTH6FSdH2vBTdDu:ZzCfIKNLUNrkKLoaFnTs
- TLSH
  T1CCB27370C64D0B7B0293518BC04E22E3211E59675B5731A973A9D21C6AEF05FA3BA1FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  Cs2Hack/locale_data/es/alert_messages.json
- Size 15KB
- SHA256 cd4a733b5100ab18131ad26a1e83c0b8143408207f8356be7c41b8b16d6dfa2f
- MD5 8e79a50ff8b6fbf053d16bdcaf08c3e9
- SHA1 4b5859f5c560fd79f8737f585d291d6e3b01bd29
- SHA512 108f6a1f5ebdb7edb72e5cd8ff35bc686880fa6ddebdb9967cd56c74de4391b32be252577acf16bb547e9d0af5244647e0fcd25ac7770b9930841bc520d4d815
- SSDEEP 384:Et+PjkoEIY/1MX/OAW/QuGwL3H1YLXPPE+X:EELkoEIG1MX/OTQuJL1QPPE+X
- TLSH
  T139626270C50E0B3B0293418BD45D22D3211E59674B17B2AA73A9C11C2ADE09FA3BB5FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15
- Target
  Cs2Hack/locale_data/es/feedback_lines.json
- Size 8KB
- SHA256 19b2e7d286585a2f57693afea586228fcf4004ee7e4cb143129da80e83137245
- MD5 8ac5a50afa69293e5888b9a9e2fd709a
- SHA1 c02a0d9d2f3786e422faaf7ff5a7f3fd693639a3
- SHA512 040c26b3fdf594e2ace29c1c1b9911158ea640fb3274b46dc656e57589e13e45e50e4cc10105a0581724b9b55fd49bc1c807d13d8bced1318eb3dcd9904fa0d1
- SSDEEP 192:HwMDblXp54ktQFOg0bGNmnOHoPC2OZn4LvqVYUNii1:tvlZaktdgsNnOHoRK2vUDAi1
- TLSH
  T11F026134CA4F4B3B0253418FD45A52D3611D892B4B6B216577A9C20C2ADE05FA77B0FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral16
- Target
  Cs2Hack/locale_data/es/labels_ui.json
- Size 24KB
- SHA256 e46a90d84a5e0b33335c4fef9920b38dd996e0566394a52691062c0c4f26fb11
- MD5 d86e1b1329d9685796efa3e41b83329b
- SHA1 8ed17bfbd81e1d174622153c4952268e7adcdda5
- SHA512 34afa84e076474e49edeccad5ee5d8127c2f2dfeca0c6bf929c24177ccbef2176509d9aa54cf13b24f338c8d50637ec23c1e0efd7278fa8f0944cc3be94e4b8a
- SSDEEP 768:lvPMeYcsPYdWfnPnzvcLJbRfnpHI9GRT8tic:l0FLPD0bJnpHI98c
- TLSH
  T158B28474C64D4B37029350CAD04E22D3616E98675B5B32A572A9D10C2AEF05FA3BB4FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral17
- Target
  Cs2Hack/locale_data/es/menu_entries.json
- Size 15KB
- SHA256 7414c120b0c35ac374c78efb12dc8c4a57b42a187b5b0b5a00cf0aa43d898ba0
- MD5 4e44f2796e2791630ef1b25eabcd916f
- SHA1 cc4a7934457c6f538a510863f7ccfb4222dbadbe
- SHA512 bcf5a8bc6fc2dbb712abb66bef5e26c397f2e4fd5ca5043c994dc16322cf02b6d0846a37f0e2e52703c053b99da34c9442ae34c1792ee2b6963d395044c4345e
- SSDEEP 384:PU+lw981DiVCN7Su79MNvflTVxbrDwCR9kIjoNwD2J:Vlw98BiVCNmu79MxfRVx/D9R9kIjqwyJ
- TLSH
  T15C626570C60E0B77029341CAC09E11E3615E996B5B1732A97399D21C7ADF05FA3BA4FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral18
- Target
  Cs2Hack/locale_data/es/popup_text.json
- Size 15KB
- SHA256 0f7438e084521f33790d8e614f9733d0f923db4dce7d11e11df471d3408bdd66
- MD5 e621ff94005011465d6610392342e8a3
- SHA1 ab52dc87920416bb56e652c4ad9ebb064d025b67
- SHA512 0c51f1b444925b3baf2df0afcb0e9ec10daf1375ac3eca2e78f00fadae3d450e4af818b316122c329a704b68fd765199a9557efb6999a8dfcbde6c3dddfeda6a
- SSDEEP 192:k75otr0BHN+kRPV2bsfBmzy3aj9J0Yg4WwFsGBNxtaxJFwrGiMQWjKPt9voqzzq2:WMr0FN+cAb1z8Uq0uwaPWvnXuTCgg/r
- TLSH
  T147626374C60E0B7B0293518AD04E12E7611E556B4B1761A973E9C21C7ADF09FA3BA0FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19
- Target
  Cs2Hack/locale_data/hu/captions.json
- Size 24KB
- SHA256 cb8430c44f4a81016a110eb6de94b6726b8969f3e14b4f6dfeccc9943eaa1b3f
- MD5 9183dbfd827349154f383b9814892071
- SHA1 7acff9059602d022b29da1735db619f246d820ca
- SHA512 ec34ffae3575be9c81618f5842a205fc05dcd49c5007a6caa9c707719e023b933c31c3dc76c19c9ce136ded64e9f328a7363755efeca400d0e2b82a5306ca05c
- SSDEEP 768:0ZjgZeOvgGEW+Jc2lUFg43maOislE+TEODy7y9bgkb:UgvMJJc2l+g4WaVsl/LO+db
- TLSH
  T1FDB25234C60E4B7B029351CAD09E12E3211E5AA74B5B71A57395C21C3ADF05FA2BA1FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral20
- Target
  Cs2Hack/locale_data/hu/menu_entries.json
- Size 3KB
- SHA256 84a7c3cf121c7d3f758e4f6c5dc79698eec86049390b39b8afcf8d9db8cf6257
- MD5 b923021d3a9e166be6f4fafc87a4d110
- SHA1 fa4427f607504fd2609a4c20dd9a054c9bb9cb62
- SHA512 a6827e8b410c9aaac9ec61d1c6def6bfacfd101a0f11e22ddd332bad3d765b80aaa92f41a46fae5ad4578647670779aeead9f1f34674aa678eefced4f2b8f8d4
- TLSH
  T12B813374C20D4F330583518AC04A21E3514EAD274B9772B5B36AD11C6AEE08FA6FA5FE
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21
- Target
  Cs2Hack/locale_data/hu/popup_text.json
- Size 24KB
- SHA256 8534cce54fc9421c17c95ac33c2efdff8425cb2a7cc2d64976f780151af8a926
- MD5 6f9a85feb79b35a57bc9c9b841bcdb1e
- SHA1 49a1be579249361c65a442c615b3d8b308b7d742
- SHA512 2243fda8693690816564264d6688f9486fcc734d4a87b749ab9839908262c1f91816f8638b1e38704f5ead9149466ab2fea89909bae8ebcdc84f7e808794d29b
- SSDEEP 768:9zsrLZug/1lxNBn1yNlew0FTtPbcLYF+j1PdszPWA:94xP1nb11w0FTtzdFKS6A
- TLSH
  T1A2B26374C64E4B37029341CAD45E22D3211E596B4B5B31A97399D21C3ADE09FA3BA0FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral22
- Target
  Cs2Hack/locale_data/it/captions.json
- Size 35KB
- SHA256 33f918e58a1b04d978f621f711470f83034daa5d4565bd41f5867c08792b749a
- MD5 0e8b4390c48a54d67dfc6bf613a68825
- SHA1 475b974d2ffa6a5c4a648f9b5db908ab53a6cbcd
- SHA512 d4520442b127e844626c6e3d9539cb1aa077ce3dfea57c4d62428441628afddd6b68dbe67d51788cc54f71d95352065807248961bd63b1103278ae6b9935b151
- SSDEEP 768:ttBHH1VQZvPE6P72NA+QwgofMZoPQ07mAxzeR8qnLvEXZLdXCSuuQv+8Ig:ttj6PPqNchofQ6VURnnLv0tkND
- TLSH
  T108F27374C60E4B3B0293418ED04E22D3111E99675F5B32A972A9D11C6ADF05FA3BB4FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23
- Target
  Cs2Hack/locale_data/it/hint_lines.json
- Size 24KB
- SHA256 13084ecd9449d3502f40ae945185c42cc1028a46a431bb96bb7214c2164803cc
- MD5 2ec6f392cacd5de4c3060c584b9222a4
- SHA1 447ff2e64198016f8e75e6e5b01e70738d582f15
- SHA512 f81b44173dd4412003e8c5803f488580b4834d50fc3ada8c2b5049f6d09d62baabfa66c453d0f8b9a01bf0f2eee26e1e25ef4684a76ac3fc8ab14a0ccb0e5a8e
- SSDEEP 768:kzMpUrh8D1klPmqulkdkzYtOOSLOYzcnuUB+LM:kzUUrh8DW8udkKgiuUL
- TLSH
  T1BBB27474C60E4B7B0293418EC05E12D3216E596B4B0B31A577A9D21C7EDE05FA3BA4FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral24
- Target
  Cs2Hack/locale_data/ja/alert_messages.json
- Size 24KB
- SHA256 b23f51c35e774afc98a0d1dcb80512bf960058ddd56d4261a8f61167bd5bb76f
- MD5 50697d8433399c198a67e97482045726
- SHA1 4e8b3ddcd6b880dc2b9af2c9079a36d8f8497dcb
- SHA512 eb155264604bbc71ad20fc89bbfdcf32dce05a186f63a93e0d967d18194204cbd2db18d6d2bae4967cd9a93b3e8fa519a0fc88d6868b8888f29416f8855d23ee
- SSDEEP 768:5r1nQhjpkondA+b5qK+pVuxJ6h44yoaDh1KfF8YNhiykCka9:l1Qht3Rb53oY6hJylhM+YNMRCJ
- TLSH
  T1C8B28570C64D0B3B0683418BD04E22E3115E59A74B5B31A973A5D21C7AEF05FA3BA4FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25
- Target
  Cs2Hack/locale_data/ja/hint_lines.json
- Size 24KB
- SHA256 e9eae7784242ffc493d3e188d65be797a038b8e30005d29976e068f32b2b933e
- MD5 c4debd5fe8a353146c0c1a90a41dc1fa
- SHA1 25656417b44e11e3f04ba872cb7bf30393155527
- SHA512 00e27dc7b28d838f7ba12b4cc9d60a668e311ce68f040d1ac587fe58f30fbb9496d87bb5adfea21a94a3d6277df90e9037ffe4494ebf9df70472b051bf26e52c
- SSDEEP 768:0+jKELl7fVQ94dc7VhphhoRInRFXQGjP1S6+IOR62Ygi/uwxd:ZjxLlRQXfKQbjlW6Ws7d
- TLSH
  T1BAB27470C60E0B37069341CAC04E22D3515E996B5B5B71A976E9D21C2ADF08FA37B0FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral26
- Target
  Cs2Hack/locale_data/ja/labels_ui.json
- Size 24KB
- SHA256 d8578e3124b4a20f4776c56ba3a6364dbc0504a0405f46c75aee5fbd33ef6842
- MD5 efe0adafc08a911027ab06a8aaa53422
- SHA1 b57318019db923f92e72accf55c2dddf1831a6d7
- SHA512 3fd59c6e6525ccae31b4b48287623bb2657937f4833cfa522caca8578e336529d7d81cdd82e004762fe1d0b284c4bd5e335ea2b8ce8ea79c116c3ff5c5e8aefe
- SSDEEP 768:1KLQ2AOPNnclVyibCvuw9EZMlo1pyIJBPCdx+sooaCQ:uQKMAElZP1pyI+dq
- TLSH
  T17AB27434C60E0F7B069301CBC05A12E3212E59A74B5772A97799C21C6ADF05E62BB5FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27
- Target
  Cs2Hack/locale_data/ko/alert_messages.json
- Size 24KB
- SHA256 6b3c0c18a45e95c7e532d3f0f5ab5b8fd0cebd646e66d224ebf94798a21bb951
- MD5 3a663a7ad77c760239f391e478b53221
- SHA1 4b2ef874f593e1f38092a8e62b63108a0ba6f966
- SHA512 9400e863b677278549d8e16205d541ef8f8c93aeba1b6330145ec0b1cc8181c9ca5bfe39abd178584a243948aa87c50dee67c889163471fa9847b7bdef85ee6e
- SSDEEP 768:LmMsvtOYgJh+bEYT7xdyzTSur6cV80PkL4mgpZnm2G:LwsjYT7xdyZ6XLYDm2G
- TLSH
  T1DEB27334C60E4B7B0293518ED09E12E3211E99674B5B31A57795D21C2AEF04FA3BA4FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral28
- Target
  Cs2Hack/locale_data/ko/popup_text.json
- Size 8KB
- SHA256 4f3102836a79609da16fb739c6c28825b3276b201a8ad213a3a13d70c175aeb0
- MD5 47b2a073746f35807baebe4ef3c86b85
- SHA1 22d1ece83141b9ba28b338d3d1cafae6d3552f22
- SHA512 bac7d915cbab77c12a7e4c6d845442cb5b259df7bac5824bbeb503f8bd05bb7ab7e5cbc2118f60c5ffd1cd83d2c291da8c5f77939487f95c4db6c95133bc04c4
- SSDEEP 192:FXs9YjS3qPfVNMARuwXuj7Ifl993jUL5XvxXwvSEIuHPu1Ycr/WskD2CWo:F5ikcVfIfl/zw5JAvS1uG7LK
- TLSH
  T121028234C6494B37015315CAD04E22C3912E492B4B5772E977A9C21C6AEF09FA3BB1FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29
- Target
  Cs2Hack/locale_data/nl/captions.json
- Size 15KB
- SHA256 f4ca01ff9904157ff2f0e3df6a9ef9d75cf5ae1c4b67868f7cd87017cce42c5b
- MD5 ec63286d72f3ea2d9e81ad1679ac17b3
- SHA1 9ce18709bbce4d132e230b80086cd1d406096696
- SHA512 48ca19090cebdc9777aef33bca1327ab2d76e95c054282ba69f4a8c12703885411cf7cf22690c86734bde36938a1d9300e067527502e275ba71e640e9ea9fee3
- SSDEEP 192:Tm0wEdbCgcVmZq5CvSTTwHzcmMx++6votml07kEPlmItD4/nc7X8Dd6gaGGXYoc0:C0PdjcVpCqTEVvoM6+Gk9vGTqOD
- TLSH
  T108628574C64E4B37069341CFC05E62A3611E45674B0B32A977A9D15C2AAF09F93BA0FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral30
- Target
  Cs2Hack/locale_data/nl/labels_ui.json
- Size 15KB
- SHA256 fe62918f7391bc325e5b1054069e6cccd8b1631cc15ba78b38be5131a9e7b89e
- MD5 65ffc5871ba6eab19db5b0e1a0a30a17
- SHA1 9524b4c6f5a4db39e2b343b570786b40c574e5f4
- SHA512 45f091651249e5d92c70bd5ebc8ee720b94d7a53919af8dd98627a1461d1fcfde33fd49eda0087d942a5115cd87a71af1ca0c1678a1bad5bc97f7f46d305cd49
- SSDEEP 384:XcEzyFxiEQ60HTo3fkcvk29+wE3HH70C19Cy:XcEzyFoER0HTmsx3wIH70C1gy
- TLSH
  T186625234C10E4B3B0193518AD08E12D3211E952B5B5B32A577E9D21C7AAE09F93BF4FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31
- Target
  Cs2Hack/msvcp140.dll
- Size 540KB
- SHA256 def46aa6a8f72f27bafac0c43334419486a4d1dcdb6c479a8ef7034b3e1fa4cb
- MD5 4e3fa9bd90ef020c14359639dc19312b
- SHA1 a51032ec39a292afda65b0e3053d4ff3e3241512
- SHA512 3e3c62fe860199953cc87e0516b77f6a039f2563cb6b5cc48edc51f243e5ea8fd9b2e3239a089966c403f17a8b3766090bc7b827399cceb00a37bac970855e15
- SSDEEP 12288:M0MrE03u1mHWV/I3z+bQEKZm+jWodEEV7X:M0p1F/IiQEKZm+jWodEENX
- TLSH
  T180C42A23F75906E0E195E3B8A1838702D7F17C5A8322E3C742EB955E2F577D0A63B690
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32