Analysis

  • max time kernel
    1483s
  • max time network
    1502s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240221-en
  • resource tags

    arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    25-02-2024 18:57

General

  • Target

    SteamSetup.exe

  • Size

    2.2MB

  • MD5

    70f3bc193dfa56b78f3e6e4f800f701f

  • SHA1

    1e5598f2de49fed2e81f3dd8630c7346a2b89487

  • SHA256

    3b616cb0beaacffb53884b5ba0453312d2577db598d2a877a3b251125fb281a1

  • SHA512

    3ffa815fea2fe37c4fde71f70695697d2b21d6d86a53eea31a1bc1256b5777b44ff400954a0cd0653f1179e4b2e63e24e50b70204d2e9a4b8bf3abf8ede040d1

  • SSDEEP

    49152:2DcHcEngZtNm1LQRHH4PTwZX6kg9hsf4lcszpyu7d/TC:rngZtNm1G4Pw6dJzZNTC

Score
4/10

Malware Config

Signatures

  • Loads dropped DLL 3 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

Processes

  • C:\Users\Admin\AppData\Local\Temp\SteamSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\SteamSetup.exe"
    1⤵
    • Loads dropped DLL
    PID:3252

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\nsxA5D7.tmp\System.dll

    Filesize

    11KB

    MD5

    a4dd044bcd94e9b3370ccf095b31f896

    SHA1

    17c78201323ab2095bc53184aa8267c9187d5173

    SHA256

    2e226715419a5882e2e14278940ee8ef0aa648a3ef7af5b3dc252674111962bc

    SHA512

    87335a43b9ca13e1300c7c23e702e87c669e2bcf4f6065f0c684fc53165e9c1f091cc4d79a3eca3910f0518d3b647120ac0be1a68eaade2e75eaa64adfc92c5a

  • C:\Users\Admin\AppData\Local\Temp\nsxA5D7.tmp\nsDialogs.dll

    Filesize

    9KB

    MD5

    0d45588070cf728359055f776af16ec4

    SHA1

    c4375ceb2883dee74632e81addbfa4e8b0c6d84a

    SHA256

    067c77d51df034b4a614f83803140fbf4cd2f8684b88ea8c8acdf163edad085a

    SHA512

    751ebf4c43f100b41f799d0fbf8db118ea8751df029c1f4c4b0daeb0fef200ddf2e41c1c9c55c2dc94f2c841cf6acb7df355e98a2e5877a7797f0f1d41a7e415