fef421907873abdf3375a944fa2d139afe6ddf66fa61edaeb2e6484ccd64f60e

Sharing

Copy URL Twitter E-mail

General

Target
secret-cs2.rar
Size 3.9MB
Sample261017-ph62jsfv3w
SHA256 fef421907873abdf3375a944fa2d139afe6ddf66fa61edaeb2e6484ccd64f60e
MD5 b0e2a1e9d5a856cfdcfb42459cbbc9e9
SHA1 d261946d414df5b793bfbb42c7fefe0ee478e2f2
SHA512 ae9febc4ee381764591d63c22673466f699e01ca074e01131c798d780275ff5451d0e19199a52ae755f1d5a60e5c6d82c92070f949f5b2ccf6941251953987c6
SSDEEP 98304:fptMpkP/+EmY5tlgpxVvjrj9lx/2lBzSeHT9Naz3L62S:fp9OuVgZvEXTz40
TLSH
T1D11633BFB5B2059BE9F9BFB730412334A6945001BEE288F967500A13A44ACD7CD77978
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution linux

Malware Config

Targets

- Target
  secret-cs2/build.bat
- Size 1KB
- SHA256 22d56979400823ef60d6b4af6e9b2274014f144aa9829656fa8ea69c1bb6d478
- MD5 cc5ff4305ec6e9bf04d6a057bccbd796
- SHA1 687bbadd613675079a4740a717a10387eb64abdf
- SHA512 053630b08a7486ee97b4a097c59b8f921039d1d7106310d39ca835ddfeb4b400ea8edb753b99b042d548a3ed87c196ca023d7290eb085acdf4c87c6f7ee75900
- TLSH
  T1E221413C7C3D12736091D246EC9B2980F6384BC303E4EEEC705B207963092D4639D582
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral1 behavioral2
- Target
  secret-cs2/build/CMakeFiles/4.3.1-msvc1/CMakeDetermineCompilerABI_C.bin
- Size 51KB
- SHA256 25ed111d9b52170da2a5da4b0e81815e2679e89e08013a1a3a05492102efec7e
- MD5 ab26fbba547d196d1cab02154ef916bb
- SHA1 a3e2345bc5e7a6a08acfe4a5346907e53e225c01
- SHA512 83e08a0d8f62c43ff3ad761a7bb2f12a29dd3ac84d13306cffd617777dd435dcd2db39354597cf7d6d4ec487b6c0841b42c3cb2de7c5496869cb00e850fb4638
- SSDEEP 384:tGV4eTwyOh8vgIeUA9ToqwQtP/A3fWQ/Aeo8iMAQfBXujXq8zP89ZL:E+yKivW4v7/AeeMxBej6gP89
- TLSH
  T18333E65F678924F7C976D23D89C66238F5A1B1B003364FC756014A1A2B71BEC783EB88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  secret-cs2/build/CMakeFiles/4.3.1-msvc1/CMakeDetermineCompilerABI_CXX.bin
- Size 51KB
- SHA256 a4596751441d0247aef2a87cee6573b3406ef27e05a9710b4542d1395ec42aca
- MD5 c010340121d1c551319d6977de27b20b
- SHA1 8295165a95839612496da0818971c572a08d3f3d
- SHA512 577b2c0a49898604a89b9f123d77ac391de70b1012226a1af11b9b487abb91f04e29faa2ee0540199c249b5f3e6df0d20ce662585b9239472b407f01422de6c1
- SSDEEP 384:oKJAeTAyuN8vgIOkeTAqKtPNBxtX/WQPAeo8iMqXDQfBX0s8zP89ZL:TWy2iPVNBvv7PAeeMqKBEsgP89
- TLSH
  T1DF33F65F678920F7C976D27D89D66238F5A1B1B013364FC752014A1A2BB1BEC783E788
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  secret-cs2/build/CMakeFiles/4.3.1-msvc1/CompilerIdC/CMakeCCompilerId.c
- Size 28KB
- SHA256 ddc1eeeda601167929842285dfefa77b95ee0d116782a3227f17e7e18fbe90eb
- MD5 24e8be84d09ea4ee4eb6bc64ecd07540
- SHA1 3ba86ddee62f78df65219f810528162e1cc8dcd1
- SHA512 379f34ca95487398c4bfc60c6a403b4503364f90fa51b7b5da3da68bc35b6db120156279d95bb023e5fa9655680a6431154dbbb8a4fa4383bce0b635b0fe573f
- SSDEEP 768:HTdzNkx/fkV9vW+2FqGvDnyQuwWGBMKK/iL263+94la:HBNs/fk7h2FqG7yQnBMKKayola
- TLSH
  T1E4D216131FE36094803B54E1111EA667F209D9BF236255E4F2ADBE5C1B58D09A3FE2CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  secret-cs2/build/CMakeFiles/4.3.1-msvc1/CompilerIdC/CMakeCCompilerId.exe
- Size 105KB
- SHA256 0e2f6cb49610ace3ab9888388b2517c32010fbd31c8df6938ffc11c53d837880
- MD5 664560a9392da32149b460a37ea6f8c1
- SHA1 9cf6ebb4a7238ed09282656645b1da4a943dfbd6
- SHA512 bb85151c27b524f3d4324d5b1904db73060e9446da07ab2b06310ed4d61a3e338b7eb661b7952d4ba493efe82a57f945beaf1b6ec2305b922b681c2703b74f37
- SSDEEP 3072:bxuQKDNfjWxb3OtcEbP+E5R3KhRRJxX5Ff:1Gfjkb30W4R3Kz
- TLSH
  T10AB36B5BA3E930F9E177867884910A45D776B8324761AFEF07A4029A1F637D18E3DF20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  secret-cs2/build/CMakeFiles/4.3.1-msvc1/CompilerIdCXX/CMakeCXXCompilerId.cpp
- Size 29KB
- SHA256 9e26b0f20786a2d59935f5dddb7dbeceb54e40f39ffd6996b2fc0e339431808d
- MD5 d6079418bf5a1ac5e66dff860b4e9435
- SHA1 43f6c2845b65b5c18f47096416785b9aaaf2b743
- SHA512 be7203ad498ae289a13435c0c70550001e7b01bbba74e401afdf167fe58141bce36cf25728c97f988847e2ff492bb677283b5646bf4e03736613c66af5403f7d
- SSDEEP 768:zTdzNkx/fkVD4k2FqcEks2QuwWGBMKK/iL26CTx6c:zBNs/fkl2FqcEiQnBMKKayJ6c
- TLSH
  T1CBD227131FE35094803B54A1111EE667B208D9BF236354E4E1ADBE5C1F68D09A3FE6CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  secret-cs2/build/CMakeFiles/4.3.1-msvc1/CompilerIdCXX/CMakeCXXCompilerId.exe
- Size 105KB
- SHA256 9e51f0e3b9b358f8b42cc9ac15480a975b2cfe769e9fa90b0e0d06dd090b83e6
- MD5 01a876e10bd8a0dea3c958b6f01e7c41
- SHA1 b50b9586c61c895ed2624b50ebb97946e69f1213
- SHA512 a4b19f2de472b501b7cf9062dce3045c14e8d4ed337c9ed4ae97dd4bcdc34da8682bdf68123e99e3faf614d5f9ece5f97f74534b4c2f19dbb2f1951240bf3f27
- SSDEEP 3072:IUYqDzreIDuVO3Y5qAFL573SNpAJBXjVhNzp:FVreYuV2it73q0Nzp
- TLSH
  T1E5B36B4BA3E930F9E177967C84914A85D776B83607A1AFEF03A402562F236D18D3DF60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  secret-cs2/build/injector/injector.exe
- Size 13KB
- SHA256 cb9d33a7bf97664513098bbdda9f72743f2d041a4d49a0ff6f8e5b099a0ed431
- MD5 63a7ff5b8a57f77d10c3b6557bff38e4
- SHA1 6b641340ecf83ad74f5ebb9c0466edeac611f610
- SHA512 8d3603bc0eaf36c889bf086969311722ef93ce4fd9114fc8bef5d6a656697b6dff9f551c8cdae0db7929d4f8b86422b6f6f2bb00cb2fea551e39aaa238247eb3
- SSDEEP 192:y7i5PZYjB08O2nzpZA6i/WjbD+13Q5tfVi:dZY10snzjjvO33
- TLSH
  T16E52280BF7174CF9D939437AC5720A11F0BAB6212B3246EF0BB4A2151DA33D16D3A58C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  secret-cs2/build/puxlinki-chiter.exe
- Size 595KB
- SHA256 5f93e99d2c47b4f26d13df8c6c9fac2e8404af43fbe98594d8af53eafb47e606
- MD5 960f72031f2a52c165e69396ec2c2b9f
- SHA1 f5aa8e7eb42bb7b570ccf201e7e102d8bd1ff000
- SHA512 e178cdade22223a0e12b6abd75be2a4666df1f9a7868dfee934dfa1a48366ffcc32933c909be2cd4b1ede05f23f4872a6950c458c6782c1761c5fd547b51a7f5
- SSDEEP 12288:HRoYUQ/JHlhHogyBu23U4miGZpp7riCDnb/uM:x5FlolBu23U4miGpiInb/uM
- TLSH
  T174D48D81F1F951E9D03AE174969AA61BF9363808171099CF63D4099D2FB37E067FB322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  secret-cs2/build/puxlinki.dll
- Size 570KB
- SHA256 c3059f96e287607330b29179ce76285421eac737edb2f71e3d4d4a62fb568ace
- MD5 edcfecb74c1f754b408222bd2399f641
- SHA1 89fd5361a1ec46d274c6c29f9dcbe35d19cfcabd
- SHA512 0f208a14b8e9653fb00b11d8ecc9dbf3e9a1bb84d766d2e0cafedb76fbcbc80b6196db52248379167d85ef989335fb2f66a90f89e76faa6ba6a2ca00ca596abf
- SSDEEP 12288:vQ/JHlhHogyBu23U4miGZpp7riCDnb/uM:4FlolBu23U4miGpiInb/uM
- TLSH
  T1A1C49D81F1F951E9D03AD174929AA61BF93A3808171499CB63D4099D2FF37E067FB322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  secret-cs2/third_party/imgui/backends/imgui_impl_wgpu.cpp
- Size 56KB
- SHA256 6cf169e4554530e8d1edc3cff4df0c2f0a8da8387acb04b895cffaa532814d79
- MD5 e9931aaf2b5c41e7b4241e4292ced7b5
- SHA1 1b56d9c6a9489f7790623466aadbfbcd1ad6bfe3
- SHA512 b0faebacf9bcbcc456bafd3e735a7313ac901bfc3642393a2efde111ae85a8744bbbe54fc71f25e0de08450199c703ef1647c2a92bab67926489ea86e1c60fb6
- SSDEEP 1536:ab7gc8XnWHM90JLRP9vfD6DgDDjDeDE6KLM:ab7gKM90JLRP9vrqYDvuzKLM
- TLSH
  T1B5430AB55D2369814D23A306FBEA5643CB25C1BB7B68D2507F4D210D2F888A7F53C35A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  secret-cs2/third_party/imgui/backends/vulkan/generate_spv.sh
- Size 254B
- SHA256 c3abb9fe51a4c033003ddabfd97c79583c89675572225b2d7b615619b58ee798
- MD5 a09d099e97faf2182cf8f37380f38437
- SHA1 9df03ad0145980bb29350970440eec4fd544fdde
- SHA512 f12ece36c97f82b1d36cea0ddb29fda90a7a4976acc62a3d3e837522a468d42b5d22902142259c670530041eb860c4cca35a6fef74eed69ffe2d38ff3815f5f1
- TLSH
  T1DCD05B117086653D1D36FACA52266DC704CC967C59020594D1C8054A67F1B835581AFF
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral23 behavioral24 behavioral25 behavioral26
- Target
  secret-cs2/third_party/minhook/build/MinGW/make.bat
- Size 319B
- SHA256 a8142cab33967b5155d72f77332d32aa6442b57938e5ba43ebebfa25dd0c412b
- MD5 fceb445999bf1ffaffa366b637547a80
- SHA1 d99b434142345d27156b8f3ca5a67b3fc31b9bbd
- SHA512 87bb7fcf7759b1cfba03a4344a09bc571d50b852262b6eb64d32ed8ae4037b8b2eafebf5aa80c4a7bd2e2cec2b234ffcff99a792d1af6eb6b245d2f606bcd94f
- TLSH
  T133E0260375A8B5B4552FA8B099834D0AC3488D69EF710A475C2A447791F10CD428E584
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  secret-cs2/third_party/minhook/build/MinGW/make.sh
- Size 321B
- SHA256 226b9a3b70ccc9beda2fc99e6c0b9c2f0b459a6a40ca00f6d260b88bedebee2b
- MD5 9305b075526bfbe133d0df19aa8c768f
- SHA1 6bffb44db4c9b30846f5a8f28bd38ce84f631c70
- SHA512 82e21d86048c7e374af73cc68d8e5e85ceddb5ff0897dc8f8864dfc2c9b170e649d28a09b315a7139ff9bcd0171c41dd3ed77172dd8685808754f3f600005c43
- TLSH
  T1F6E08603B694F1F4591B6CA0A9976D09C35C9D74BF301E8B6C6944B396F22DD428E580
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral29 behavioral30

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30