Overview
overview
6Static
static
1GWYF_Fix_R...ic.rar
windows7-x64
3GWYF_Fix_R...ic.rar
windows10-2004-x64
3GWYF_Fix_R...64.dll
windows7-x64
3GWYF_Fix_R...64.dll
windows10-2004-x64
3GWYF_Fix_R...er.exe
windows7-x64
1GWYF_Fix_R...er.exe
windows10-2004-x64
1GWYF_Fix_R...ix.ini
windows7-x64
1GWYF_Fix_R...ix.ini
windows10-2004-x64
1GWYF_Fix_R...x.json
windows7-x64
3GWYF_Fix_R...x.json
windows10-2004-x64
3GWYF_Fix_R...ix.url
windows7-x64
6GWYF_Fix_R...ix.url
windows10-2004-x64
6GWYF_Fix_R...64.dll
windows7-x64
1GWYF_Fix_R...64.dll
windows10-2004-x64
1GWYF_Fix_R...ge.dll
windows7-x64
1GWYF_Fix_R...ge.dll
windows10-2004-x64
1GWYF_Fix_R...64.dll
windows7-x64
1GWYF_Fix_R...64.dll
windows10-2004-x64
3GWYF_Fix_R...64.dll
windows7-x64
1GWYF_Fix_R...64.dll
windows10-2004-x64
1GWYF_Fix_R...st.txt
windows7-x64
1GWYF_Fix_R...st.txt
windows10-2004-x64
1GWYF_Fix_R...64.dll
windows7-x64
1GWYF_Fix_R...64.dll
windows10-2004-x64
3GWYF_Fix_R...mm.dll
windows7-x64
1GWYF_Fix_R...mm.dll
windows10-2004-x64
3MrPcGamer.com.url
windows7-x64
6MrPcGamer.com.url
windows10-2004-x64
4README !!!.txt
windows7-x64
1README !!!.txt
windows10-2004-x64
1[Game3rb.com].url
windows7-x64
6[Game3rb.com].url
windows10-2004-x64
6Analysis
-
max time kernel
93s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
16/04/2023, 06:37
Static task
static1
Behavioral task
behavioral1
Sample
GWYF_Fix_Repair_Steam_V6_Generic.rar
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
GWYF_Fix_Repair_Steam_V6_Generic.rar
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
GWYF_Fix_Repair_Steam_V6_Generic/Golf With Your Friends_Data/Plugins/x86_64/steam_api64.dll
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
GWYF_Fix_Repair_Steam_V6_Generic/Golf With Your Friends_Data/Plugins/x86_64/steam_api64.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
GWYF_Fix_Repair_Steam_V6_Generic/Launcher.exe
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
GWYF_Fix_Repair_Steam_V6_Generic/Launcher.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
GWYF_Fix_Repair_Steam_V6_Generic/OnlineFix.ini
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
GWYF_Fix_Repair_Steam_V6_Generic/OnlineFix.ini
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
GWYF_Fix_Repair_Steam_V6_Generic/OnlineFix.json
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
GWYF_Fix_Repair_Steam_V6_Generic/OnlineFix.json
Resource
win10v2004-20230221-en
Behavioral task
behavioral11
Sample
GWYF_Fix_Repair_Steam_V6_Generic/OnlineFix.url
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
GWYF_Fix_Repair_Steam_V6_Generic/OnlineFix.url
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
GWYF_Fix_Repair_Steam_V6_Generic/OnlineFix64.dll
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
GWYF_Fix_Repair_Steam_V6_Generic/OnlineFix64.dll
Resource
win10v2004-20230221-en
Behavioral task
behavioral15
Sample
GWYF_Fix_Repair_Steam_V6_Generic/PhotonBridge.dll
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
GWYF_Fix_Repair_Steam_V6_Generic/PhotonBridge.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
GWYF_Fix_Repair_Steam_V6_Generic/SteamOverlay64.dll
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
GWYF_Fix_Repair_Steam_V6_Generic/SteamOverlay64.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
GWYF_Fix_Repair_Steam_V6_Generic/StubDRM64.dll
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
GWYF_Fix_Repair_Steam_V6_Generic/StubDRM64.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
GWYF_Fix_Repair_Steam_V6_Generic/dlllist.txt
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
GWYF_Fix_Repair_Steam_V6_Generic/dlllist.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral23
Sample
GWYF_Fix_Repair_Steam_V6_Generic/steam_api64.dll
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
GWYF_Fix_Repair_Steam_V6_Generic/steam_api64.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral25
Sample
GWYF_Fix_Repair_Steam_V6_Generic/winmm.dll
Resource
win7-20230220-en
Behavioral task
behavioral26
Sample
GWYF_Fix_Repair_Steam_V6_Generic/winmm.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral27
Sample
MrPcGamer.com.url
Resource
win7-20230220-en
Behavioral task
behavioral28
Sample
MrPcGamer.com.url
Resource
win10v2004-20230221-en
Behavioral task
behavioral29
Sample
README !!!.txt
Resource
win7-20230220-en
Behavioral task
behavioral30
Sample
README !!!.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral31
Sample
[Game3rb.com].url
Resource
win7-20230220-en
Behavioral task
behavioral32
Sample
[Game3rb.com].url
Resource
win10v2004-20230220-en
General
-
Target
GWYF_Fix_Repair_Steam_V6_Generic/steam_api64.dll
-
Size
282KB
-
MD5
2bca4e2c047ec969cb3cff277e7fc184
-
SHA1
c4b5b00b605e59c6fdcb6731f2e53069506e287a
-
SHA256
f1eb582e607a1e43cdb1654bfb7cb29ad46f6728b3fb89a14f7727e0e8daab69
-
SHA512
3819178ec650298157b1d67317e0895cb92709b106d0d8525921e341eba5e960f42434e010066bb405f1ba1619adff1a645ede58e16c4b2d88df2c90611a6cb5
-
SSDEEP
6144:Aa0EKzmilQBrUssevOkHcAxilMrCynC0bcLd1x:B0EZbr3se1SynC9x
Malware Config
Signatures
-
Program crash 1 IoCs
pid pid_target Process procid_target 2652 4216 WerFault.exe 61
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\GWYF_Fix_Repair_Steam_V6_Generic\steam_api64.dll,#11⤵PID:4216
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 4216 -s 3882⤵
- Program crash
PID:2652
-
-
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -pss -s 448 -p 4216 -ip 42161⤵PID:4640