Overview

overview

6

Static

static

3

SteamSetup.exe

windows10-1703-x64

6

$PLUGINSDI...er.bmp

windows10-1703-x64

4

$PLUGINSDI...rd.bmp

windows10-1703-x64

4

public/ste...an.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

public/ste...ch.txt

windows10-1703-x64

1

public/ste...sh.txt

windows10-1703-x64

1

public/ste...ch.txt

windows10-1703-x64

1

public/ste...sh.txt

windows10-1703-x64

1

public/ste...sh.txt

windows10-1703-x64

1

public/ste...ch.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

public/ste...ek.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

public/ste...se.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

public/ste...na.txt

windows10-1703-x64

1

public/ste...am.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

public/ste...sh.txt

windows10-1703-x64

1

public/ste...se.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

public/ste...se.txt

windows10-1703-x64

1

public/ste...sh.txt

windows10-1703-x64

1

public/ste...sh.txt

windows10-1703-x64

1

public/ste...se.txt

windows10-1703-x64

1

public/ste...ai.txt

windows10-1703-x64

1

public/ste...sh.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

uninstall.exe

windows10-1703-x64

1

Analysis

  • max time kernel
    15s
  • max time network
    17s
  • platform
    windows10-1703_x64
  • resource
    win10-20231215-en
  • resource tags

    arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system
  • submitted
    11-02-2024 12:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    public/steambootstrapper_czech.txt

  • Size

    4KB

  • MD5

    6def4d3cf1453d5fb69d22fca29892a4

  • SHA1

    09fe62653e55668de75a9fc5b64949ea81eb4991

  • SHA256

    60c29f3c57c44c58daf69be797bfede31967b1ddfc9bb68cb7ddaa0acda67c8c

  • SHA512

    ee4f3f5dd8a8aadde9cff8f8aca8a45fa419c36fd8a4a7d3af9b71e1f7e5d9e1d01c329c70e6da53238822b536e35224e55004bf2e1af4ec17d5b56ccfc58549

  • SSDEEP

    96:2iAz7xzQK8VzRZfVAxzQXRQM1qN/lS4xIjfiI7yOo8S8qQk:lAz9zozrdAZQXRJqi4OvO38S8qQk

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\public\steambootstrapper_czech.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:516

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads