Overview

overview

3

Static

static

3

P5R Goldberg A2.zip

windows7-x64

1

P5R Goldberg A2.zip

windows10-2004-x64

1

ColdClientLoader.ini

windows7-x64

1

ColdClientLoader.ini

windows10-2004-x64

1

steam_sett...id.txt

windows7-x64

1

steam_sett...id.txt

windows10-2004-x64

1

steam_sett...64.dll

windows7-x64

1

steam_sett...64.dll

windows10-2004-x64

1

steam_sett...es.txt

windows7-x64

1

steam_sett...es.txt

windows10-2004-x64

1

steamclient.dll

windows7-x64

1

steamclient.dll

windows10-2004-x64

1

steamclient64.dll

windows7-x64

1

steamclient64.dll

windows10-2004-x64

1

steamclien...er.exe

windows7-x64

1

steamclien...er.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    P5R Goldberg A2.zip

  • Size

    2.3MB

  • MD5

    718577c9a0efb904f009d3155d4586ee

  • SHA1

    cb002dfe9e77987c6cf5c8aedd66f6824c9d8d5f

  • SHA256

    1ad34f613d9f729776ea41bb417a47962f3ebeaa08a60088fba38be0e7f14daf

  • SHA512

    496a1a859c00acbc4a1324d5e25e0a732dffa4f816f8272e2a94600c5364bf47a675199b257ebd3d6f0fbbca2b6a5e58053800fd9a04e7ccc1706cf40224e850

  • SSDEEP

    49152:4P9K6697aoCZU/lLp/U4c2fzXOKuHj/FkrHawesj3d5HE4wJtVXMiXxCqJ68B:4Pk6fZUQpMzX8hg60/HE4wJtVh0qJ68B

Score
3/10

Malware Config

Signatures

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • P5R Goldberg A2.zip
    .zip
  • ColdClientLoader.ini
  • steam_settings/force_steamid.txt
  • steam_settings/steam_api64.dll
    .dll windows:5 windows x64 arch:x64

    289b2254a2c1e14995dd9995d1686fdb


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • steam_settings/steam_interfaces.txt
  • steamclient.dll
    .dll windows:6 windows x86 arch:x86

    5dd268f44ce93a6f008b620583e0cad0


    Headers

    Imports

    Exports

    Sections

  • steamclient64.dll
    .dll windows:6 windows x64 arch:x64

    902a5422d6e0609ff46121a70fb95ee0


    Headers

    Imports

    Exports

    Sections

  • steamclient_loader.exe
    .exe windows:6 windows x86 arch:x86

    5a6e533a847e4a6c14333c31892a86eb


    Headers

    Imports

    Sections