General

  • Target

    SteamSetup (1).exe

  • Size

    2.3MB

  • MD5

    1b54b70beef8eb240db31718e8f7eb5d

  • SHA1

    da5995070737ec655824c92622333c489eb6bce4

  • SHA256

    7d3654531c32d941b8cae81c4137fc542172bfa9635f169cb392f245a0a12bcb

  • SHA512

    fda935694d0652dab3f1017faaf95781a300b420739e0f9d46b53ce07d592a4cfa536524989e2fc9f83602d315259817638a89c4e27da709aada5d1360b717eb

  • SSDEEP

    49152:UDP/q9MIX/crfcNVBaXp1m0zyVCMwBHgFzoZhRP8:kC9MI8Hm0GCjgFc3Rk

Score
1/10

Malware Config

Signatures

Files

  • SteamSetup (1).exe
    .exe windows:4 windows x86 arch:x86

    4ea4df5d94204fc550be1874e1b77ea7


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    84484e9fa52eef55faa40a17a55a27f6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    e2ee55bddad4241d619d6a8a38e2d869


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    0b75f1007d3cc8e457970ae3e3fd53c3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Steam.exe
    .exe windows:6 windows x86 arch:x86

    aba7499e03b82a57f9bd5a8efa8507ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • bin/SteamService.exe
    .exe windows:6 windows x86 arch:x86

    0be7d7dbb308281584f6d43acc498f0e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • public/steambootstrapper_brazilian.txt
  • public/steambootstrapper_bulgarian.txt
  • public/steambootstrapper_czech.txt
  • public/steambootstrapper_danish.txt
  • public/steambootstrapper_dutch.txt
  • public/steambootstrapper_english.txt
  • public/steambootstrapper_finnish.txt
  • public/steambootstrapper_french.txt
  • public/steambootstrapper_german.txt
  • public/steambootstrapper_greek.txt
  • public/steambootstrapper_hungarian.txt
  • public/steambootstrapper_indonesian.txt
  • public/steambootstrapper_italian.txt
  • public/steambootstrapper_japanese.txt
  • public/steambootstrapper_korean.txt
  • public/steambootstrapper_koreana.txt
  • public/steambootstrapper_latam.txt
  • public/steambootstrapper_norwegian.txt
  • public/steambootstrapper_polish.txt
  • public/steambootstrapper_portuguese.txt
  • public/steambootstrapper_romanian.txt
  • public/steambootstrapper_russian.txt
  • public/steambootstrapper_schinese.txt
  • public/steambootstrapper_spanish.txt
  • public/steambootstrapper_swedish.txt
  • public/steambootstrapper_tchinese.txt
  • public/steambootstrapper_thai.txt
  • public/steambootstrapper_turkish.txt
  • public/steambootstrapper_ukrainian.txt
  • public/steambootstrapper_vietnamese.txt
  • uninstall.exe
    .exe windows:4 windows x86 arch:x86

    4ea4df5d94204fc550be1874e1b77ea7


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:4 windows x86 arch:x86

    3e8d18bb71c7ebbda2ddc2a4bb03547b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ShellLink.dll
    .dll windows:5 windows x86 arch:x86

    45fa690faed482cb9bfd08458ed442ae


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    0b75f1007d3cc8e457970ae3e3fd53c3


    Code Sign

    Headers

    Imports

    Exports

    Sections