Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

3

SteamSetup.exe

windows10-1703-x64

6

$PLUGINSDI...er.bmp

windows10-1703-x64

4

$PLUGINSDI...rd.bmp

windows10-1703-x64

4

public/ste...an.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

public/ste...ch.txt

windows10-1703-x64

1

public/ste...sh.txt

windows10-1703-x64

1

public/ste...ch.txt

windows10-1703-x64

1

public/ste...sh.txt

windows10-1703-x64

1

public/ste...sh.txt

windows10-1703-x64

1

public/ste...ch.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

public/ste...ek.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

public/ste...se.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

public/ste...na.txt

windows10-1703-x64

1

public/ste...am.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

public/ste...sh.txt

windows10-1703-x64

1

public/ste...se.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

public/ste...se.txt

windows10-1703-x64

1

public/ste...sh.txt

windows10-1703-x64

1

public/ste...sh.txt

windows10-1703-x64

1

public/ste...se.txt

windows10-1703-x64

1

public/ste...ai.txt

windows10-1703-x64

1

public/ste...sh.txt

windows10-1703-x64

1

public/ste...an.txt

windows10-1703-x64

1

uninstall.exe

windows10-1703-x64

1

Analysis

  • max time kernel
    16s
  • max time network
    18s
  • platform
    windows10-1703_x64
  • resource
    win10-20231220-en
  • resource tags

    arch:x64arch:x86image:win10-20231220-enlocale:en-usos:windows10-1703-x64system
  • submitted
    11/02/2024, 12:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    public/steambootstrapper_english.txt

  • Size

    4KB

  • MD5

    2fe6613e267857982d7df4368c9827ec

  • SHA1

    d520c7427b283e3ff167b850ab15352e46d328d3

  • SHA256

    2eba5f3f0b0dbcc2cd69c36c220a2355d1ba3cd67b6e25b5846c80e1604bcac0

  • SHA512

    cf2fc8978adf54dce5700eda7d8beb4917c89bf5458131171eab95463e1b3a3315770f4baae07e498e8e36a8478f09e27054ca2d06b4542c86d8459360572be4

  • SSDEEP

    96:hSlb0IG997a8ICgARZ2pyUBnXPz5dc6LzIIivI/BxkHLs06J:8lHmbICgAr2hJc6LkIiQ/DOLsVJ

Score
1/10

Malware Config

Signatures

  • Opens file in notepad (likely ransom note) 1 IoCs
    ransomware

Processes

  • C:\Windows\system32\NOTEPAD.EXE
    C:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\public\steambootstrapper_english.txt
    1⤵
    • Opens file in notepad (likely ransom note)
    PID:212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads