Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

SteamSetup.exe

windows10-1703-x64

6

$PLUGINSDI...er.bmp

windows10-1703-x64

4

$PLUGINSDI...rd.bmp

windows10-1703-x64

4

public/ste...an.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

public/ste...ch.txt

windows10-1703-x64

1

public/ste...sh.txt

windows10-1703-x64

1

public/ste...ch.txt

windows10-1703-x64

1

public/ste...sh.txt

windows10-1703-x64

1

public/ste...sh.txt

windows10-1703-x64

1

public/ste...ch.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

public/ste...ek.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

public/ste...se.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

public/ste...na.txt

windows10-1703-x64

1

public/ste...am.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

public/ste...sh.txt

windows10-1703-x64

1

public/ste...se.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

public/ste...se.txt

windows10-1703-x64

1

public/ste...sh.txt

windows10-1703-x64

1

public/ste...sh.txt

windows10-1703-x64

1

public/ste...se.txt

windows10-1703-x64

1

public/ste...ai.txt

windows10-1703-x64

1

public/ste...sh.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

uninstall.exe

windows10-1703-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SteamSetup.exe

  • Size

    2.2MB

  • Sample

    240211-pjrm9aaa74

  • MD5

    70f3bc193dfa56b78f3e6e4f800f701f

  • SHA1

    1e5598f2de49fed2e81f3dd8630c7346a2b89487

  • SHA256

    3b616cb0beaacffb53884b5ba0453312d2577db598d2a877a3b251125fb281a1

  • SHA512

    3ffa815fea2fe37c4fde71f70695697d2b21d6d86a53eea31a1bc1256b5777b44ff400954a0cd0653f1179e4b2e63e24e50b70204d2e9a4b8bf3abf8ede040d1

  • SSDEEP

    49152:2DcHcEngZtNm1LQRHH4PTwZX6kg9hsf4lcszpyu7d/TC:rngZtNm1G4Pw6dJzZNTC

Score
6/10
discoverypersistence

Malware Config

Targets

    • Target

      SteamSetup.exe

    • Size

      2.2MB

    • MD5

      70f3bc193dfa56b78f3e6e4f800f701f

    • SHA1

      1e5598f2de49fed2e81f3dd8630c7346a2b89487

    • SHA256

      3b616cb0beaacffb53884b5ba0453312d2577db598d2a877a3b251125fb281a1

    • SHA512

      3ffa815fea2fe37c4fde71f70695697d2b21d6d86a53eea31a1bc1256b5777b44ff400954a0cd0653f1179e4b2e63e24e50b70204d2e9a4b8bf3abf8ede040d1

    • SSDEEP

      49152:2DcHcEngZtNm1LQRHH4PTwZX6kg9hsf4lcszpyu7d/TC:rngZtNm1G4Pw6dJzZNTC

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1

    • Target

      $PLUGINSDIR/modern-header.bmp

    • Size

      25KB

    • MD5

      da3486d12bb4c8aec16bd9e0d363d23f

    • SHA1

      863244a4845c9d5dea8dd36e1083f5639e1224e1

    • SHA256

      d93b76d51bd2214fa6e999c1bf70b4aff5165a6542f9b9b2a92b5672601f4624

    • SHA512

      8e40adb65a4ad46f3bc5920d7fd8294397268e754b1eb00d4f7b0883be6468448033d9a46cf3a00fccddb4a7c81e7f984cf5a25731532c1aeface69573dfe59f

    • SSDEEP

      96:iAwofR7VVNRn5/7hY0buGRGGM/o3FYsIR:YWxvN//7a0buGRGGTdm

    Score
    4/10
    behavioral2

    • Target

      $PLUGINSDIR/modern-wizard.bmp

    • Size

      150KB

    • MD5

      3614a4be6b610f1daf6c801574f161fe

    • SHA1

      6edee98c0084a94caa1fe0124b4c19f42b4e7de6

    • SHA256

      16e0edc9f47e6e95a9bcad15adbdc46be774fbcd045dd526fc16fc38fdc8d49b

    • SHA512

      06e0eff28dfd9a428b31147b242f989ce3e92474a3f391ba62ac8d0d05f1a48f4cf82fd27171658acbd667eaffb94cb4e1baf17040dc3b6e8b27f39b843ca281

    • SSDEEP

      48:ZQEM+jeAwtwVUoYxq+HQiNE/7o+f3cbqBtpozK8lHl/GGKOFHNPf33zFYsvwL:ZkWeftwV1enu/7ozCeu8RGGvP/jFYsv

    Score
    4/10
    behavioral3

    • Target

      public/steambootstrapper_brazilian.txt

    • Size

      4KB

    • MD5

      8ebd46495dd3b4ab05431c5c771d5657

    • SHA1

      e426214322a729faddb5bc80053af5750c76683b

    • SHA256

      70c39d5d5b16640165de19cee80da4a391035108cbc5f5009372a86954f0fe92

    • SHA512

      53afd923f583eda4db580935a8cdd62413af8e830c04f2c12d15c55e905c114ec11a5e4483660601504c27e9350e9e47c6432f8f699464e11c5050fe846d7dc4

    • SSDEEP

      96:3aArpYaRZ8hYzaAD25nmoVIPEPVIPErKOo8D85e:Gar8iRCNmVPXP738D85e

    Score
    1/10
    behavioral4

    • Target

      public/steambootstrapper_bulgarian.txt

    • Size

      6KB

    • MD5

      239c03a3dc1c27993da724736d086cef

    • SHA1

      ff88246f8ea3502873dcbdc622378f006c58a2e6

    • SHA256

      b387e2fb971297d3438acca130c53dfdd202ae2ca5b52d6503333734cda4fbfc

    • SHA512

      656922e8f2dec46ef36efba5c85088c47b02e89f62b27559611fcbe6ef85c6cd8462a4532e2d2d7f4faa977ab24f0de6f5f72e3075f8889db9e6e60baa162a32

    • SSDEEP

      192:sK8p+typPx7rYLxGnyVUY8WYw6i0KfBKKfg38m8i/:sK8piqMLxGnyVU/YEWYWg38m8G

    Score
    1/10
    behavioral5

    • Target

      public/steambootstrapper_czech.txt

    • Size

      4KB

    • MD5

      6def4d3cf1453d5fb69d22fca29892a4

    • SHA1

      09fe62653e55668de75a9fc5b64949ea81eb4991

    • SHA256

      60c29f3c57c44c58daf69be797bfede31967b1ddfc9bb68cb7ddaa0acda67c8c

    • SHA512

      ee4f3f5dd8a8aadde9cff8f8aca8a45fa419c36fd8a4a7d3af9b71e1f7e5d9e1d01c329c70e6da53238822b536e35224e55004bf2e1af4ec17d5b56ccfc58549

    • SSDEEP

      96:2iAz7xzQK8VzRZfVAxzQXRQM1qN/lS4xIjfiI7yOo8S8qQk:lAz9zozrdAZQXRJqi4OvO38S8qQk

    Score
    1/10
    behavioral6

    • Target

      public/steambootstrapper_danish.txt

    • Size

      4KB

    • MD5

      03b664bd98485425c21cdf83bc358703

    • SHA1

      0a31dcfeb1957e0b00b87c2305400d004a9a5bdb

    • SHA256

      fdf7b42b3b027a12e1b79cb10ab9e6e34c668b04eb9e8a907d8611ba46473115

    • SHA512

      4a8cdd4b98432ba9d9b36bc64aab9a2eab31a074d1cbdfab3d35a14216c60752b5580c41bbb70104993420043685d3bd47eb6637b8fcbb3f42f76a15e4be041d

    • SSDEEP

      96:iKSCj4RjGEcH6RZY77p7zrOsLEPnvIBXKvI2BqOo8380Bg3:BJj4jGnH6rY77lrOxPnQoQmq38380By

    Score
    1/10
    behavioral7

    • Target

      public/steambootstrapper_dutch.txt

    • Size

      4KB

    • MD5

      31a29061e51e245f74bb26d103c666ad

    • SHA1

      271e26240db3ba0dcffc10866ccfcfa1c33cf1cc

    • SHA256

      56c8a86fa95eab0d8f34f498e079b5516b96d2a2f1ad9c2a888555e50e47f192

    • SHA512

      f85865c1e9ab45e5586d3dd2b45d15265193e8a3c34b6bb1ac7e415a1ea878cfb044e8e01012e917e4f00bb9e0a422f56253f328df1bac99a145e19433354cf8

    • SSDEEP

      96:TnsaIWCk1TXfSRkAcXJNRZY/r/iza1GUNrzRxbM4x9yJs+Xc1AZqI79qIjiOo8nl:LsaIVATvycZNrY/KQyJs+ZZz79zji38l

    Score
    1/10
    behavioral8

    • Target

      public/steambootstrapper_english.txt

    • Size

      4KB

    • MD5

      2fe6613e267857982d7df4368c9827ec

    • SHA1

      d520c7427b283e3ff167b850ab15352e46d328d3

    • SHA256

      2eba5f3f0b0dbcc2cd69c36c220a2355d1ba3cd67b6e25b5846c80e1604bcac0

    • SHA512

      cf2fc8978adf54dce5700eda7d8beb4917c89bf5458131171eab95463e1b3a3315770f4baae07e498e8e36a8478f09e27054ca2d06b4542c86d8459360572be4

    • SSDEEP

      96:hSlb0IG997a8ICgARZ2pyUBnXPz5dc6LzIIivI/BxkHLs06J:8lHmbICgAr2hJc6LkIiQ/DOLsVJ

    Score
    1/10
    behavioral9

    • Target

      public/steambootstrapper_finnish.txt

    • Size

      4KB

    • MD5

      594be5b10d9f551e551cf20eae0e6dfc

    • SHA1

      191c20f5cb0c27ecc5a055fa2379694f5e27a610

    • SHA256

      e350ca62e777da4da6d25885be96d48e7ce3acf021a74f2a4902354a1bf03fbb

    • SHA512

      e27bf6593a177c22e16ddf5a44d82b34b02063645a7fd63943b936028d9c433c89628038768a300c296c2d3bcab2ef6b8532a19f7283952d041865c704f62b0b

    • SSDEEP

      96:OJCZC1RCSwhp1RZY/T4zcVYsspWIN71BIxZvaZIUZvaPOo828jbG:JkPwhp1rY/Ucx0ALbYi3828jK

    Score
    1/10
    behavioral10

    • Target

      public/steambootstrapper_french.txt

    • Size

      4KB

    • MD5

      da69785dfbf494002f108dd73020183d

    • SHA1

      34bb6061cdf120e7dced0402e588c3f712cf2dc0

    • SHA256

      8cce22e7f13486f2bc612dcc8fa31d81038e6084a350fa10299d40c3a7f878c8

    • SHA512

      db773783b63ed1d66a59272e05304c174b69f85d2838ae8049dffed6b6b30c2011fd9042dd652f9a1733a2b6891870b426cf1985d41921e5360c9b1ae1330e20

    • SSDEEP

      96:vk3l1CEN8RLcSMWPrfwgXWRZDbUvzBT5H52EkJJIbcYIbsgqOo83fy8WJv:sVIEug0ETrDsB+EkQbclbsgq38Py8WJv

    Score
    1/10
    behavioral11

    • Target

      public/steambootstrapper_german.txt

    • Size

      4KB

    • MD5

      395286db3e67a59868e2662c326c541a

    • SHA1

      716014d76622612a1bde2d4e1744d024f6d0b830

    • SHA256

      02e48ee4e10354a2b2741d2e57ef565404753779f847906b5ae5c98ede06c01b

    • SHA512

      64cdf1e6701ea57474051e338eee74859fc0ff4acd71ee0718a9b8cd698e94a9793c1901b6791fc0fc268c53fbc1e7e2f94ac1024f3f8765bf713954c194b0fe

    • SSDEEP

      96:hn6e0CBtWTeRBtWTkcBMBcVRZY13nSYzBPCN0Ky5zaxhlwG/Iq8N8S32IBa3DOoo:h6erBtWqBtWDBMBcVrYF7GvFANv4D38f

    Score
    1/10
    behavioral12

    • Target

      public/steambootstrapper_greek.txt

    • Size

      6KB

    • MD5

      b9e30df8cf272813b121133fcf259752

    • SHA1

      16706f982f16d5feb9c808f94b8cfa50c23f5d80

    • SHA256

      88919d7be26fb3e06401fc0254733d92fd743ecc56da4177b41613e1f094c3e8

    • SHA512

      7beb65c0477b02742741a8ce23557f4f15e8cf1b1ef03a6bbadbf594bdf2cd686d7356d93719111d27b309a10ca75846765a13bb3eb4d0411785dfb13a675fc4

    • SSDEEP

      192:xjAVmh67h7mrdtjIWdS0ZOwdS0ZQo38a8FN:9pVnOYQo38a8j

    Score
    1/10
    behavioral13

    • Target

      public/steambootstrapper_hungarian.txt

    • Size

      4KB

    • MD5

      18aaaf5ffcdd21b1b34291e812d83063

    • SHA1

      aa9c7ae8d51e947582db493f0fd1d9941880429f

    • SHA256

      1f45bb7bdfa01424f9237eec60eba35dc7f0dc4e8c2e193fe768fe96d3ff76d5

    • SHA512

      4f3e56d1abe26b56d3f805dc85baaca450c0c7bec57ebcf8a6bb6ebb8588307dad130c83bf792bac76694909a14fd6a4d7d1e9b31e32fba11256343b9fc18154

    • SSDEEP

      96:ADKraKKnH5BpRZELDO1cMQzQNW3kjN7MIOjHfvMIOwuOo888OK:W+a5BprELDXMAQNnN1OjHfhOwu3888OK

    Score
    1/10
    behavioral14

    • Target

      public/steambootstrapper_italian.txt

    • Size

      4KB

    • MD5

      8958371646901eac40807eeb2f346382

    • SHA1

      55fb07b48a3e354f7556d7edb75144635a850903

    • SHA256

      b01ec64d75fd1fbd00fbeb45a3fb39244911a8b22bb43de4e0c03f205184f585

    • SHA512

      14c5dbb017822336f22bf6779ccd4a66604ddc5f2c3caa24271e96f739fef007754d96844efa422d6682cbcd2d3bc902c36f0f6acb3eb87ed8d7b3f885973554

    • SSDEEP

      96:5fTYcpLQ4J+4XRZauvgpJ2zyHTNb9eMuIluIVOo83zy8Xa6:xpkA3XrDQHlHV38Dy8Xa6

    Score
    1/10
    behavioral15

    • Target

      public/steambootstrapper_japanese.txt

    • Size

      5KB

    • MD5

      7e1d15fc9ba66a868c5c6cb1c2822f83

    • SHA1

      bfe9a25fdc8721d7b76cecb9527a9ba7823dc3d7

    • SHA256

      fc74e26a8baabbe4851109512d85173b75dbf7293d41eb3b92a1957a773c8265

    • SHA512

      0892be14a858cc860766afb1c996b2c355108a7e50971ea3ec00d15069e919a6eb05a61fa839bea3938492c391e274144c5e248f4c204a602bf36adf27e5b406

    • SSDEEP

      96:wnwSwjaxKPVcljckFEJckFzRZYwCeHalzL9L3XHwrqdJOxoPLD1hKkHzULyqI5d5:ewSwINckeJck5rY5RXwaJdykHRly38TD

    Score
    1/10
    behavioral16

    • Target

      public/steambootstrapper_korean.txt

    • Size

      4KB

    • MD5

      d75580775d67a85353189736222a8878

    • SHA1

      ccb2275c8f5d119640064fd533ca15f30d93f331

    • SHA256

      10720923c1048502c5191d6d1d8580e35e707b24d457941dae94a87371af989a

    • SHA512

      757dd94a1e3debb2520855a3d00e44e3a98b5764caf9c16c8d088fc1a1f1024eed742f1051635721f4bf2c00d1dac11fd975c09a7f5df78d1863de88f9bbf9fe

    • SSDEEP

      96:bno0CtiVRtncgzjthtF5NdLRZYyzzjBaz23//w2Dv3R8QtVSMfXIjNXIPemiOo8U:zorkv+gnRFTtrYxUXLLB8Q2Oq3838gpq

    Score
    1/10
    behavioral17

    • Target

      public/steambootstrapper_koreana.txt

    • Size

      4KB

    • MD5

      d75580775d67a85353189736222a8878

    • SHA1

      ccb2275c8f5d119640064fd533ca15f30d93f331

    • SHA256

      10720923c1048502c5191d6d1d8580e35e707b24d457941dae94a87371af989a

    • SHA512

      757dd94a1e3debb2520855a3d00e44e3a98b5764caf9c16c8d088fc1a1f1024eed742f1051635721f4bf2c00d1dac11fd975c09a7f5df78d1863de88f9bbf9fe

    • SSDEEP

      96:bno0CtiVRtncgzjthtF5NdLRZYyzzjBaz23//w2Dv3R8QtVSMfXIjNXIPemiOo8U:zorkv+gnRFTtrYxUXLLB8Q2Oq3838gpq

    Score
    1/10
    behavioral18

    • Target

      public/steambootstrapper_latam.txt

    • Size

      4KB

    • MD5

      7913f3f33839e3af9e10455df69866c2

    • SHA1

      15fa957d0a6a2717027f5b35f4dbe5e0ab8ece25

    • SHA256

      05bc1f4973c6d36002ac1b37ce46b1f941fcb4338282e0ec1ec83fb558d1a88c

    • SHA512

      534e541757d19ee157a268bf7ea358b48015f400542fcfa49cdb547cd652926160f015fe2cf026d9c4996e56ab90ca3899dfd457997d915bf6bc9d7bb00ba804

    • SSDEEP

      96:9FDhCIRRcJ3NkrHRZYGerQrmermz+Ejp6lLSG+oIq2K/+oIq2vgKOo8348o06:fsISbSrYrybSZYlEzKazv938o8o06

    Score
    1/10
    behavioral19

    • Target

      public/steambootstrapper_norwegian.txt

    • Size

      4KB

    • MD5

      5462f47e56b978659ef56f196db013f4

    • SHA1

      4749824d4e909369f59217d4980963ff17353f3f

    • SHA256

      cbfbe91d4a4661df814ea447c03f4ca872ef3e27073a1eb746faccbfe75afc8a

    • SHA512

      5a437968fc06619cf553ced32dba9c7c948f4364f02c8017986e9a4f09e9832b849c7e0567485ca1beba34a258d29b2612ea3ed6045c81777e9a5201139f81a3

    • SSDEEP

      96:hL+9CbrRtcejaRZYBEpdzudyyACWxmkz6lIb2oZIA+Oo8q80Br+:EQb1+ejarYO7u4mkz6Sb2o2A+38q80Ba

    Score
    1/10
    behavioral20

    • Target

      public/steambootstrapper_polish.txt

    • Size

      4KB

    • MD5

      9b0b0e82f753cc115d87c7199885ad1b

    • SHA1

      5743a4ab58684c1f154f84895d87f000b4e98021

    • SHA256

      0bdeee9fa28d54d384e06ea646fbcfe3f06698a31dfdc1a50703ffe83ad78d32

    • SHA512

      b7780b82fbe705bc8e5a527c011eb685c99ef0b2eb810617b9f82b891341af95ef1c2f46dce9e458c0c4dcc3e7a0d21db6c77f03419cd1c4b521a9b72f9017df

    • SSDEEP

      96:Wa2CgROcEhwYRZYXvs9zp6SjluImGIljIjXOo89p8FR:X1wVEhwYrYQoI4fOD3838FR

    Score
    1/10
    behavioral21

    • Target

      public/steambootstrapper_portuguese.txt

    • Size

      4KB

    • MD5

      eb8926608c5933f05a3f0090e551b15d

    • SHA1

      a1012904d440c0e74dad336eac8793ac110f78f8

    • SHA256

      2ed2b0d654d60e0a82b0968a91d568b775144e9d92f2b077b6da75f85ad12d04

    • SHA512

      9113c42c38836f71ff0cc7019aff8c873845f47fbf1ab97e981cb038f4d8495b6df784402b1ee9666e8e567ae866b0284c81e6a16efb47131d5ef88569c4843a

    • SSDEEP

      96:uIsrct89cRZetJ2Ommrzrrd2GQvqGVA9VM7KOo8388UL6:Lt89crMYOZXwSwIx38s8UL6

    Score
    1/10
    behavioral22

    • Target

      public/steambootstrapper_romanian.txt

    • Size

      4KB

    • MD5

      31bd3d4d8de5af4642b21d586d5ee54d

    • SHA1

      552bebb93c71cd8acd72558db1810530909fb276

    • SHA256

      52f256ded29ce22945b5bc0ef7a227189dfa91da69265ec13283a7067c239071

    • SHA512

      cea49fc70b18a1294ec7e564ff7f4d1ff7efeb0db1cf1b088da6adcecc282569380f225e9a150d1666c5c1977ba4de0a5d9d667c72cfb8569a50546b978e9132

    • SSDEEP

      96:Ivm7CuRPcPlXRZYIiK2zHazOPPUqlWdSHd1IAGo+pRIAGxMpnOo83L8sN:SmeeEPlXrYht6zKUodCwo3878sN

    Score
    1/10
    behavioral23

    • Target

      public/steambootstrapper_russian.txt

    • Size

      6KB

    • MD5

      e04ad6c236b6c61fc53e2cb57ced87e8

    • SHA1

      e9d4846b7e6cc755ee14a5d3fa45ee7d3bf425a4

    • SHA256

      08c775efa77c2a92d369f794882e467b6e2526e61bc7aa7724f48e174524502e

    • SHA512

      0dfb7e6d811d649103499018f3d115c542fcaba420ceb69124a4d837fe162ce514e7be2040860c5ef5f9c01c961fa6eea8730606b73ec107d87597989b6fd331

    • SSDEEP

      96:c5qCHRRc8sF+RZLqls1s1pzMDqAFoJFOTfNfKIik6IiVqOo868Crsk:GxS8sErWl+s1BFpg1Zh3868Crsk

    Score
    1/10
    behavioral24

    • Target

      public/steambootstrapper_schinese.txt

    • Size

      4KB

    • MD5

      56dcf7b68f70826262a6ffaffe6b1c49

    • SHA1

      12e4272ba0e4eabc610670cdc6941f942da1eb6a

    • SHA256

      948cad1bb27109e008f2457248880c759d3fa98b92c5b4033b94f455cb8ac43f

    • SHA512

      c3fd9caf0bd4c303a7cc300faada9cfe6dd752e82d67625b31f4c0c2c091596508bb477fe19f758fdf79b25b8ac3f5320a8785d2b6705b9bcc28a054a59454e2

    • SSDEEP

      96:/BAGpCOREHce3QuRZY7yezuqY2v14q3HPG9AHINL4QI04VOo8a8Jz:Sr+re3QurY7XfHPgNL4d04V38a8Jz

    Score
    1/10
    behavioral25

    • Target

      public/steambootstrapper_spanish.txt

    • Size

      4KB

    • MD5

      e9b8fccdb78bf9d275b79c75b2ff3e7b

    • SHA1

      4b549411ed4db0f0a3699e76531353c226b06a76

    • SHA256

      41ecfe0ffd6043a66a41bf9ea032712f2d1bbc19b434c6c666a107ee379f21e4

    • SHA512

      4ce905a31f3a410712722271abd7e0a9a6c43646b61a321912b4a8e8f6fab68ab69add1d701c501bb069b8ecb65ecaf3bfa9be983933d0234a8c81c24bc6601f

    • SSDEEP

      96:pFDhCIRRcJ3NkrHRZYGerQrmermz+Ejp6lLSG+oIq2K/+oIq2vgKOo8348o06:rsISbSrYrybSZYlEzKazv938o8o06

    Score
    1/10
    behavioral26

    • Target

      public/steambootstrapper_swedish.txt

    • Size

      4KB

    • MD5

      b2248784049e1af0c690be2af13a4ef3

    • SHA1

      aec7461fa46b7f6d00ff308aa9d19c39b934c595

    • SHA256

      4bf6b25bf5b18e13b04db6ed2e5ed635eb844fc52baa892f530194d9471f5690

    • SHA512

      f5cee6bba20a4d05473971f7f87a36990e88a44b2855c7655b77f48f223219978d91bcd02d320c7e6c2ec368234e1d0201be85b5626ef4909e047e416e1a066c

    • SSDEEP

      96:cnvF+VYBVZcdOMuRZvODz1Q4EqvL8FdGPbII8ncswBIIZswpOo8V8pVKw:CvsVsV6dOJrc1qGSdGPsI3+Idp38V8vl

    Score
    1/10
    behavioral27

    • Target

      public/steambootstrapper_tchinese.txt

    • Size

      4KB

    • MD5

      5c7bc92e0d948e3bba3f26f64a22fe7e

    • SHA1

      bd259397a312bee9b8262058c30e0e354eeea93a

    • SHA256

      5e6b0978fe8e2d14905f46e089b06681d6dfe76dd0c1551c168171ac4de75969

    • SHA512

      8a6e18ce3d38a9658172b1871255a9941c572114137e468f130956c73ff13f282a46074a1dda6404dbdbf317ecdaadf01324194b8f8c081f862037784f4946ba

    • SSDEEP

      96:MBA8ClRHcPTTeRZYEIlzAtwLaIrjGRXaFHJICVkHJIDVIOo8J8Jn:xT/8PTTerY7HH4qFHGvHGC38J8Jn

    Score
    1/10
    behavioral28

    • Target

      public/steambootstrapper_thai.txt

    • Size

      7KB

    • MD5

      1a537a1d30fba1d3db449a9207b63835

    • SHA1

      ab6903b4c8d6bd3571960b1218714b8d76b1880d

    • SHA256

      49b6b664d50a1ae0c732bcfbbdd1db1812ddccf00bcf5f40200f0e7cff5542ee

    • SHA512

      1215b0d017a6e3ea207edafe8edd500a91a7a971b2f989d8006fa65e475ae32ec00df3e8ec06b4077f64f5b789c536bfb9d8b9945ca0e0731d68e48876bd8459

    • SSDEEP

      192:MFlO8vlYUUlM/aUl1orYy5U55Z5I5vF3k5caR57jR5qf5c5AK5D7XBzmUZT5odWn:MFBwuYMy5U55Z5I5vF3k5caj7jR5qf5q

    Score
    1/10
    behavioral29

    • Target

      public/steambootstrapper_turkish.txt

    • Size

      4KB

    • MD5

      29f9a5ab4adfae371bf980b82de2cb57

    • SHA1

      6f7ef52a09b99868dd7230f513630ffe473eddf8

    • SHA256

      711675edb20b3cb70acf6cf75f2eea8e0d87c8ace3e11c8df362b4517427a34f

    • SHA512

      543fe63f791250e05e8fda24fd2ceadebb4c8925e8927de49ae490895c87eed3e61a9ad50237532649f99fe3165836261de215ee3f66ffbfc6d677ddeea7732a

    • SSDEEP

      96:xnkgCvLRzchBmRZY6PfwEGcyDQz32cgRc1PqX0pVmbIN0P1bINuOo888SM:Rkv9ohBmrY68A3eXWRYSk3888SM

    Score
    1/10
    behavioral30

    • Target

      public/steambootstrapper_ukrainian.txt

    • Size

      6KB

    • MD5

      cadd7a2f359b22580bdd6281ea23744d

    • SHA1

      e82e790a7561d0908aee8e3b1af97823e147f88b

    • SHA256

      3dd0edfbe68236e668fb308f92fe7c6493dbb05bfca85a48de93588f479ccc99

    • SHA512

      53672dd13e6ccbe96f6d4a61297c595b6d6cba8de92caa51ccf8ab1d8a82eea5a425eab348f295b9ec27de0026ef849d9230f751a46e040be8863923f91b8519

    • SSDEEP

      192:RQqEG5oFQE3FqioFq2rYFdpp0XnZZSEbUFvxlDl2oC38gv851e:RxEoAQE1PAfM/pp0XnZ0nvHDl2X38gvr

    Score
    1/10
    behavioral31

    • Target

      uninstall.exe

    • Size

      139KB

    • MD5

      4f009883567dfa9e908c5ffa25a2fa0a

    • SHA1

      5848783144c5a04fd4fff71651e3195444156b03

    • SHA256

      d0b0305b42c35716482a6aa08c8257c19aad225e3ffd9ab1f0de411d8b9e592e

    • SHA512

      015e03849ccb6f646538ebb5a1f75bd973258564a4d2664f51da11e88316e9a3d2863de131f105daf2173a5c494e6c6bcc621c6952144ed4bf4bd2bbdec5ef6d

    • SSDEEP

      3072:cAe+3aJpgWXTBuA/JFONMVRO9qyVK+J5n/79:/B+pgUXJFOSVAqyVK+J5nj9

    Score
    1/10
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks