Overview
overview
8Static
static
3Dependenci...64.exe
windows10-2004-x64
4Dependenci...64.exe
windows11-ltsc_2024-x64
4Orbit.exe
windows10-2004-x64
5Orbit.exe
windows11-ltsc_2024-x64
5OrbitLauncher.exe
windows10-2004-x64
8OrbitLauncher.exe
windows11-ltsc_2024-x64
8Resources\...er.exe
windows10-2004-x64
1Resources\...er.exe
windows11-ltsc_2024-x64
1Resources\ffmpeg.exe
windows10-2004-x64
1Resources\ffmpeg.exe
windows11-ltsc_2024-x64
1Analysis
- max time kernel
148s - max time network
130s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
03/09/2026, 22:34
Static task
static1
Behavioral task
behavioral1
Sample
Dependencies\VC_redist.x64.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Dependencies\VC_redist.x64.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
Orbit.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Orbit.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
OrbitLauncher.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
OrbitLauncher.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
Resources\cs2-dumper.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
Resources\cs2-dumper.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
Resources\ffmpeg.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
Resources\ffmpeg.exe
Resource
win11ltsc2024-20260709-en
General
- Target Resources\cs2-dumper.exe
- Size 2.1MB
- Sample260903-2hb8dsgm3t
- SHA256 95d0390cd4962a9eea050d6ed6d2717d681e1d76b7972ea0991348936e172c9d
- MD5 9639ff642d5d20fa920b6fca0c54978c
- SHA1 a35dbb629b1cc3e65cfdad7da15142eb0aefe18e
- SHA512 51860cf9f87210b7de15a480343dca5fd04e7da2493e1cace7a8bb0c4a25f3363ba27b567647bee577e3f0e784d5de529b045dd33b4dce6a79e109c04327749e
- SSDEEP 49152:JStFqrYT8HrLiMk2r+LW9HnoDE1zYEYH+XyFdoQR:OtRoYoQR
- TLSH T180A52816769E98ECC1A9C474C34A4A736A2174CB0B367AFF44D446353FAAAE42F3C714
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 5804 cs2-dumper.exe 5804 cs2-dumper.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 5804 cs2-dumper.exe