Trojan.CsgoHack.P
Threat Scorecard
EnigmaSoft Threat Scorecard
EnigmaSoft Threat Scorecards are assessment reports for different malware threats which have been collected and analyzed by our research team. EnigmaSoft Threat Scorecards evaluate and rank threats using several metrics including real-world and potential risk factors, trends, frequency, prevalence, and persistence. EnigmaSoft Threat Scorecards are updated regularly based on our research data and metrics and are useful for a wide range of computer users, from end users seeking solutions to remove malware from their systems to security experts analyzing threats.
EnigmaSoft Threat Scorecards display a variety of useful information, including:
Popularity Rank: The ranking of a particular threat in EnigmaSoft’s Threat Database.
Severity Level: The determined severity level of an object, represented numerically, based on our risk modeling process and research, as explained in our Threat Assessment Criteria.
Infected Computers: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
See also Threat Assessment Criteria.
| Popularity Rank: | 10,181 |
| Threat Level: | 80 % (High) |
| Infected Computers: | 1,209 |
| First Seen: | January 17, 2022 |
| Last Seen: | April 21, 2026 |
| OS(es) Affected: | Windows |
Table of Contents
Analysis Report
General information
| Family Name: | Trojan.CsgoHack.P |
|---|---|
| Signature status: | No Signature |
Known Samples
Known Samples
This section lists other file samples believed to be associated with this family.|
MD5:
11636e420627f26749238ffcc44c087d
SHA1:
076bd64b7ecb74dfa6ee6e62b0af8ac8ed4daabe
File Size:
57.34 KB, 57344 bytes
|
|
MD5:
514f8f2e09b3bf637c4f89237aa77b2c
SHA1:
5c5988a1c4666a7e1591df27b57d7129f4446e73
File Size:
51.20 KB, 51200 bytes
|
|
MD5:
c68e7d16a970001b70022c87a8fe5455
SHA1:
688d5e506ec0bcab43d97e5e5e9b6f92b19873cf
File Size:
51.20 KB, 51200 bytes
|
|
MD5:
c3f897e7d01a6d8dc8a85efcea4bb93a
SHA1:
905c90354def89ac70c2038406af4e3bc2f72458
File Size:
51.71 KB, 51712 bytes
|
|
MD5:
6f4a9bb592175743d3909f72367285f9
SHA1:
9cbe6da43ee92107fffcaab5255fdecb3b562bd4
File Size:
50.18 KB, 50176 bytes
|
Show More
|
MD5:
70a45b933c6659b90320f48cbdff9d7b
SHA1:
2d73f4a0a975642a4b4b5423d9e0d7be5190018b
File Size:
51.71 KB, 51712 bytes
|
|
MD5:
25f96cb25d68c515d4c3886913637c76
SHA1:
a98b59c9338606e898a43483833d21717c9dd842
SHA256:
E5CBB3762F8E3F7CFEE895637E1819374BC485816FCA87144CB4657A112B01B0
File Size:
60.42 KB, 60416 bytes
|
|
MD5:
7e788b38b2c5229e462f5cc63208130a
SHA1:
f9354ff63e16a0dbaa0264429f0bf1de67540344
SHA256:
E202EE4C011C4CE8610E1ECAF522FA441C5589158BFE307A4F89ED8CDB9FE778
File Size:
50.18 KB, 50176 bytes
|
|
MD5:
fb962367163e3ecc12b57d48b1a407ef
SHA1:
2da8b08862b0d6c0988a761f4302fe4bb5f28efb
SHA256:
E8090AE5AEDE89D67FE9A3CA30D82A1A939376734D2637ED572F56AD38F8A26B
File Size:
55.30 KB, 55296 bytes
|
|
MD5:
56dd28b45c12ccfcb0081592fa32c65e
SHA1:
4710dd7ce94fb8c133368e701fe36f158465b425
SHA256:
7377BD76E45EA71F7A55532259ECD234671152422889602403EFF2C1AADC07CC
File Size:
55.30 KB, 55296 bytes
|
|
MD5:
1d0c14a721a456c710c649e3068319b3
SHA1:
24985b9775d263396ed9fb8947db331b10bf5391
SHA256:
B4C17D564B957C6F9948350FA443C43928724F8515B1F64B393426B137FB12AD
File Size:
51.20 KB, 51200 bytes
|
|
MD5:
a08e62ccd047b5eecf0106af9cbb7a07
SHA1:
5f58923c47c19b9be500fd79ebba1feadbda4cd4
SHA256:
CF1281C0DE3AD2333F26CA1EF209DAAAC07869D8EEABB894452623F109832E0A
File Size:
60.42 KB, 60416 bytes
|
|
MD5:
9aebec919f39aada028f035d80be8040
SHA1:
3355848e619aa93763e2458e7480127d74a900c2
SHA256:
EA21FFAE4E3C62B84E625341C92BF2580C5AC1B9055BD6EC63435263C8C50FCE
File Size:
51.20 KB, 51200 bytes
|
|
MD5:
c3e56644d9b62f9836be38aa03aef613
SHA1:
d72e1e1270478af585b91457ec92e8e1e988c030
SHA256:
DC656783D03C19F67590109FAC8A82DF20C14FB0EB5CF1356BDAE57AFCD75ED3
File Size:
52.74 KB, 52736 bytes
|
|
MD5:
b372b29ecd036d6184a31ff24d02c3c8
SHA1:
7ed2bd915dd965b9762c0d64305f38a7e6803ecc
SHA256:
817819EE85E1FB04A79E489E0FDC8872FBC134810A87143BF8CB49AE99366728
File Size:
50.18 KB, 50176 bytes
|
|
MD5:
03a2af95fec91b586210a92b965aaef5
SHA1:
2dbadfadf8f4b1079154358e3cce0d0a55d1ba3f
SHA256:
C39558E24850098201FE975F06D8B2B3E0ED820B4A94655DE180048374ECD3FB
File Size:
55.81 KB, 55808 bytes
|
|
MD5:
9c811c5691473e7be60fc1f980697f5b
SHA1:
e1d7e8b7b701d1877826366dc880327e0f4b4946
SHA256:
9FBF7C101D48342163EA10E8CA61AADF03676DB85ADF3597A654648D5CF1CFF4
File Size:
51.20 KB, 51200 bytes
|
|
MD5:
b6b2be1e6d852f1aae8f1733b49e4ed5
SHA1:
50de65c292995eac0bbb5d7b38b5cc85623984e1
SHA256:
D2BADDC5DE90DB0D8EA42BF0DCDFF41B43FA7BA23B0E652CC7E3E2E11ED96253
File Size:
57.34 KB, 57344 bytes
|
|
MD5:
9216c3d47e4bb8a375f022138a9b434e
SHA1:
9b47bc5fa63a7e8e45ddd8bdf496e8bb402bf445
SHA256:
32DFFC8C1804B9BED964CC457FBFFCBAE4D427F80D364EBCF609C53A4004741B
File Size:
62.46 KB, 62464 bytes
|
|
MD5:
c4114793e2fa0b60781c6d0cc19bba24
SHA1:
0ed62965b1271bca15aa0cacb096241d06e81cb7
SHA256:
A74206B1735AABF27EC9EE565FDF82AEEA6A3455ED69BAA1BDA70E2E8DB3A46F
File Size:
60.93 KB, 60928 bytes
|
|
MD5:
79a8e8e9f4cd1b2b00c0d94d7eef7c48
SHA1:
ed908ebca80087c378a2621fcc6fb83f6da2ddde
SHA256:
3EE79921DCC5B54086C153EB2F502B05C585FA361410AB582AC764771141745E
File Size:
50.18 KB, 50176 bytes
|
|
MD5:
d2b8e77b3940deec75fb8c70ae067e18
SHA1:
85aa1d3f8530c58a150545143adcf1704e42395a
SHA256:
301B2C0D57DCAB732961A56ED79BE9311C994A6CA1EF779FA14A8DC5BB86E7FF
File Size:
50.18 KB, 50176 bytes
|
|
MD5:
85c6c1e0e5871c21a81784970942ab3d
SHA1:
731974f1b8722dfb1ffee756758e86f60d3b2cc7
SHA256:
66F70B5C87A6378AA6848C82E3F969B3EA8FBCACD1E625D31B5657D3856F5F07
File Size:
51.20 KB, 51200 bytes
|
|
MD5:
e91f25db24b4a970450e8387381c10a8
SHA1:
25fc955785dd8df7316d79cb49b13f92b462fe10
SHA256:
6955272903D319AAD6CA67FB9645CF68317E70D7629067310E20C6F8BD02943D
File Size:
58.88 KB, 58880 bytes
|
|
MD5:
13bafd88a89c52fe0616715b66343d2f
SHA1:
f263ad0556d20b732389408efa82c2872b9bf437
SHA256:
AB8DE30BFEA48F20F61528B5CC4599EF775D0ABF091DC8B0FE081FC16C3028BE
File Size:
50.18 KB, 50176 bytes
|
|
MD5:
098bf5bc62ec6f2b78ebadbbb0b67138
SHA1:
6f18967f0d46e905d7f16b6e3eb6dd4a596903d0
SHA256:
38FDC107036A112024DFB954104A844AA73A916066677B3F30B9A461262E395F
File Size:
52.22 KB, 52224 bytes
|
|
MD5:
8baa9ddc93c158d7f76091c591df327d
SHA1:
f254e755aaa4fee89ad14efe0042f9c743679c25
SHA256:
3C1303E078A9E156311374EC4109430CBEB81B8AD2C445067CD1E32A98C37E27
File Size:
42.50 KB, 42496 bytes
|
|
MD5:
808e1add04d7ea7c3e88ad0e0ffad916
SHA1:
adacc7869e78b27a22725e96de22e0b488ed56ae
SHA256:
F2EAC1175003FE5B6811B2ADD80621BF1C6DF9172BDA1FA6A100765AF7054907
File Size:
54.27 KB, 54272 bytes
|
|
MD5:
855e0b6cb60866fa5d8b0c1517f38df1
SHA1:
ba04ee4f131f105e333effb72454d7556a19ec2d
SHA256:
752950335F1113B356F72089910F6F05C55E76F84B5B19F992986DA162F557D2
File Size:
52.22 KB, 52224 bytes
|
|
MD5:
e8a823cc79704bc85d96d3f545572baa
SHA1:
4a772b4bb45f80ccaa8e298771750ab908da5f2f
SHA256:
B2AE111ADDB9042F4322B6E54E37BC62246D9AA76E01D236614DD450BC85BA2E
File Size:
50.69 KB, 50688 bytes
|
Windows Portable Executable Attributes
- File doesn't have "Rich" header
- File doesn't have exports table
- File doesn't have security information
- File has exports table
- File is 32-bit executable
- File is console application (IMAGE_SUBSYSTEM_WINDOWS_CUI)
- File is either console or GUI application
- File is Native application (NOT .NET application)
- File is not packed
- IMAGE_FILE_DLL is not set inside PE header (Executable)
Show More
- IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)
File Traits
- 2+ executable sections
- JMC
- No Version Info
- x86
Block Information
Block Information
During analysis, EnigmaSoft breaks file samples into logical blocks for classification and comparison with other samples. Blocks can be used to generate malware detection rules and to group file samples into families based on shared source code, functionality and other distinguishing attributes and characteristics. This section lists a summary of this block data, as well as its classification by EnigmaSoft. A visual representation of the block data is also displayed, where available.| Total Blocks: | 124 |
|---|---|
| Potentially Malicious Blocks: | 0 |
| Whitelisted Blocks: | 121 |
| Unknown Blocks: | 3 |
Visual Map
0
0
0
0
0
0
0
0
0
0
0
?
?
0
0
0
0
0
?
0
0
0
0
0
2
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0 - Probable Safe Block
? - Unknown Block
x - Potentially Malicious Block
? - Unknown Block
x - Potentially Malicious Block
Similar Families
Similar Families
This section lists other families that share similarities with this family, based on EnigmaSoft’s analysis. Many malware families are created from the same malware toolkits and use the same packing and encryption techniques but uniquely extend functionality. Similar families may also share source code, attributes, icons, subcomponents, compromised and/or invalid digital signatures, and network characteristics. Researchers leverage these similarities to rapidly and effectively triage file samples and extend malware detection rules.- Agent.FDS
- Agent.FGT
- Agent.FYH
- Agent.VGA
- Agent.XCO
Show More
- Agent.XSE
- Agent.XSH
- BadJoke.XA
- Injector.YF
- KillMBR.Y
- KillMBR.YA
- Optix.A
- Remcos.IF
- Remcos.IL
- Rozena.HGF
- Rozena.UG
- Trojan.Agent.Gen.WT
