General

  • Target

    data.zip

  • Size

    8.0MB

  • MD5

    5cddde0176f0b7c7a4a7b62028282cf5

  • SHA1

    a8c8c755ce631f4e772ed60a3e6cc0a9a4afda96

  • SHA256

    c3ad620d7f5c73d3688735b00f42078e60dd2e300d263d409937fcf29117b5f7

  • SHA512

    be5c77954f349661c1d3d96b5b5e234e55b557404b0812b92d5d440df717d76a44fea359d61137cd3db203df8bc420ae6b7a8dd5931e995b1d89ed4c092adc52

  • SSDEEP

    196608:+GznghcrTM+MKvfkQxCnhH0e9n2n+D4iybV7Bw1x:+enZ3MIfkQxO0Q2ny4vji

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • data.zip
    .zip
  • EASteamProxy.exe
    .exe windows:6 windows x64 arch:x64

    e8f6984829b11831577c4d66dfedf94f


    Code Sign

    Headers

    Imports

    Sections

  • Qt5Core.dll
    .dll windows:6 windows x64 arch:x64

    2530442c15bdf5e880f3e86bd015d2bf


    Headers

    Imports

    Exports

    Sections

  • Qt5Network.dll
    .dll windows:6 windows x64 arch:x64

    8307f0e2ecc6bdee56d484a6da9becc5


    Headers

    Imports

    Exports

    Sections

  • cedula.mdb
  • libcrypto-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    eb9cfc22836094167bd699fc0a51bab6


    Headers

    Imports

    Exports

    Sections

  • libssl-1_1-x64.dll
    .dll windows:6 windows x64 arch:x64

    74f51c2177062ab2752fc871ebf0d685


    Headers

    Imports

    Exports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    7be75bce9bc33e1e12ce35a06ab9327d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcp140_1.dll
    .dll windows:6 windows x64 arch:x64

    20717227ccb65afbaea7feeb74196ea2


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • steam_api64.dll
    .dll windows:6 windows x64 arch:x64

    c69c22b5a3698527f0d3c9618c3affbd


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    f241ab269df0f49a166138f5cc16a017


    Code Sign

    Headers

    Imports

    Exports

    Sections