Overview
overview
3Static
static
3secret-cs2/build.bat
windows10-2004-x64
3secret-cs2/build.bat
windows11-ltsc_2024-x64
3secret-cs2..._C.exe
windows10-2004-x64
1secret-cs2..._C.exe
windows11-ltsc_2024-x64
1secret-cs2...XX.exe
windows10-2004-x64
1secret-cs2...XX.exe
windows11-ltsc_2024-x64
1secret-cs2...Id.bat
windows10-2004-x64
3secret-cs2...Id.bat
windows11-ltsc_2024-x64
3secret-cs2...Id.exe
windows10-2004-x64
1secret-cs2...Id.exe
windows11-ltsc_2024-x64
1secret-cs2...Id.bat
windows10-2004-x64
3secret-cs2...Id.bat
windows11-ltsc_2024-x64
3secret-cs2...Id.exe
windows10-2004-x64
1secret-cs2...Id.exe
windows11-ltsc_2024-x64
1secret-cs2...or.exe
windows10-2004-x64
1secret-cs2...or.exe
windows11-ltsc_2024-x64
1secret-cs2...er.exe
windows10-2004-x64
1secret-cs2...er.exe
windows11-ltsc_2024-x64
1secret-cs2...ki.dll
windows10-2004-x64
1secret-cs2...ki.dll
windows11-ltsc_2024-x64
1secret-cs2...gpu.js
windows10-2004-x64
3secret-cs2...gpu.js
windows11-ltsc_2024-x64
3secret-cs2...spv.sh
ubuntu-18.04-amd64
1secret-cs2...spv.sh
debian-9-armhf
1secret-cs2...spv.sh
debian-9-mips
1secret-cs2...spv.sh
debian-9-mipsel
1secret-cs2...ke.bat
windows10-2004-x64
3secret-cs2...ke.bat
windows11-ltsc_2024-x64
3secret-cs2...ake.sh
windows10-2004-x64
3secret-cs2...ake.sh
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
17/10/2026, 12:20
Static task
static1
Behavioral task
behavioral1
Sample
secret-cs2/build.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
secret-cs2/build.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral3
Sample
secret-cs2/build/CMakeFiles/4.3.1-msvc1/CMakeDetermineCompilerABI_C.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral4
Sample
secret-cs2/build/CMakeFiles/4.3.1-msvc1/CMakeDetermineCompilerABI_C.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral5
Sample
secret-cs2/build/CMakeFiles/4.3.1-msvc1/CMakeDetermineCompilerABI_CXX.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral6
Sample
secret-cs2/build/CMakeFiles/4.3.1-msvc1/CMakeDetermineCompilerABI_CXX.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral7
Sample
secret-cs2/build/CMakeFiles/4.3.1-msvc1/CompilerIdC/CMakeCCompilerId.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral8
Sample
secret-cs2/build/CMakeFiles/4.3.1-msvc1/CompilerIdC/CMakeCCompilerId.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral9
Sample
secret-cs2/build/CMakeFiles/4.3.1-msvc1/CompilerIdC/CMakeCCompilerId.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral10
Sample
secret-cs2/build/CMakeFiles/4.3.1-msvc1/CompilerIdC/CMakeCCompilerId.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral11
Sample
secret-cs2/build/CMakeFiles/4.3.1-msvc1/CompilerIdCXX/CMakeCXXCompilerId.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral12
Sample
secret-cs2/build/CMakeFiles/4.3.1-msvc1/CompilerIdCXX/CMakeCXXCompilerId.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral13
Sample
secret-cs2/build/CMakeFiles/4.3.1-msvc1/CompilerIdCXX/CMakeCXXCompilerId.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral14
Sample
secret-cs2/build/CMakeFiles/4.3.1-msvc1/CompilerIdCXX/CMakeCXXCompilerId.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral15
Sample
secret-cs2/build/injector/injector.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral16
Sample
secret-cs2/build/injector/injector.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral17
Sample
secret-cs2/build/puxlinki-chiter.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral18
Sample
secret-cs2/build/puxlinki-chiter.exe
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral19
Sample
secret-cs2/build/puxlinki.dll
Resource
win10v2004-20260911-en
Behavioral task
behavioral20
Sample
secret-cs2/build/puxlinki.dll
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral21
Sample
secret-cs2/third_party/imgui/backends/imgui_impl_wgpu.js
Resource
win10v2004-20260911-en
Behavioral task
behavioral22
Sample
secret-cs2/third_party/imgui/backends/imgui_impl_wgpu.js
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral23
Sample
secret-cs2/third_party/imgui/backends/vulkan/generate_spv.sh
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral24
Sample
secret-cs2/third_party/imgui/backends/vulkan/generate_spv.sh
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral25
Sample
secret-cs2/third_party/imgui/backends/vulkan/generate_spv.sh
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral26
Sample
secret-cs2/third_party/imgui/backends/vulkan/generate_spv.sh
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral27
Sample
secret-cs2/third_party/minhook/build/MinGW/make.bat
Resource
win10v2004-20260911-en
Behavioral task
behavioral28
Sample
secret-cs2/third_party/minhook/build/MinGW/make.bat
Resource
win11ltsc2024-20260911-en
Behavioral task
behavioral29
Sample
secret-cs2/third_party/minhook/build/MinGW/make.sh
Resource
win10v2004-20260911-en
Behavioral task
behavioral30
Sample
secret-cs2/third_party/minhook/build/MinGW/make.sh
Resource
win11ltsc2024-20260911-en
General
- Target secret-cs2/build/CMakeFiles/4.3.1-msvc1/CompilerIdCXX/CMakeCXXCompilerId.bat
- Size 29KB
- Sample261017-ph62jsfv3w
- SHA256 9e26b0f20786a2d59935f5dddb7dbeceb54e40f39ffd6996b2fc0e339431808d
- MD5 d6079418bf5a1ac5e66dff860b4e9435
- SHA1 43f6c2845b65b5c18f47096416785b9aaaf2b743
- SHA512 be7203ad498ae289a13435c0c70550001e7b01bbba74e401afdf167fe58141bce36cf25728c97f988847e2ff492bb677283b5646bf4e03736613c66af5403f7d
- SSDEEP 768:zTdzNkx/fkVD4k2FqcEks2QuwWGBMKK/iL26CTx6c:zBNs/fkl2FqcEiQnBMKKayJ6c
- TLSH T1CBD227131FE35094803B54A1111EE667B208D9BF236354E4E1ADBE5C1F68D09A3FE6CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 4904 cmd.exe