General

  • Target

    SteamAchievementManager-7.0.37.zip

  • Size

    54KB

  • Sample

    241004-yb6a4sxaqa

  • MD5

    bc16c7824ce9360fc3737a0051d272a6

  • SHA1

    883b3327de19c2a27c185c041c22a330a17ae577

  • SHA256

    9b194fe4e124ff2715c3fd5e7e65e7e999ddc58e4fa89ebb9fbd43938a50f7ea

  • SHA512

    699e93e0b50410681412542b07582981c95e57c73ba685000209d41a3437ff4bde3a5bccf469c11b9a71e15a6ce44b2d02336d63642b0ec72490e7c84a1a6626

  • SSDEEP

    1536:+c+22zeNApnPsxu9WdWXSSlIrSHtIxHrWVXY:+71eepPY316HuwY

Malware Config

Targets

    • Target

      SteamAchievementManager-7.0.37.zip

    • Size

      54KB

    • MD5

      bc16c7824ce9360fc3737a0051d272a6

    • SHA1

      883b3327de19c2a27c185c041c22a330a17ae577

    • SHA256

      9b194fe4e124ff2715c3fd5e7e65e7e999ddc58e4fa89ebb9fbd43938a50f7ea

    • SHA512

      699e93e0b50410681412542b07582981c95e57c73ba685000209d41a3437ff4bde3a5bccf469c11b9a71e15a6ce44b2d02336d63642b0ec72490e7c84a1a6626

    • SSDEEP

      1536:+c+22zeNApnPsxu9WdWXSSlIrSHtIxHrWVXY:+71eepPY316HuwY

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Detected potential entity reuse from brand STEAM.

    • Target

      LICENSE.txt

    • Size

      889B

    • MD5

      0a5ac1788024462f52f748e391d1c96c

    • SHA1

      2470e7906f4fd7fe5cec643489e83c4e2013f68d

    • SHA256

      e4bff363695d6fd3cc517cccf2821d8a0887389c49840f23a758920133a0f35c

    • SHA512

      5d71a6d76b17459cb197dbeda3262426a01e99cc7588a238727e5af9d6381538bd4ceb64f8f2674045abaf07221e18632c64f084caaadcc27bd62631cf0fd0d2

    Score
    3/10
    • Target

      SAM.API.dll

    • Size

      30KB

    • MD5

      7dab915b0e87cbe1e6ab045193eeef10

    • SHA1

      62cebc30eb4a649a0297e8ae6c134c7394a139ec

    • SHA256

      26e596ec9618716f2dba81d187af821dde15e97acbd2d4c9d3847b2b5cfb104f

    • SHA512

      0689301792464d984cea9a50af8a6d6899aff66ba64d5cea46cb330ad1ab570906a2453bb50a9c729ea59929408f8af215890ed0cb7500bbe72cdcbbf80598a3

    • SSDEEP

      384:wFt7Sh7Q1LkYlvhfnsYsDTMpABlWPhMAo16nLEEi+mmcwasdmbE3lc:mSh8PdnEApxPYEcUcwasyr

    Score
    3/10
    • Target

      SAM.Game.exe

    • Size

      48KB

    • MD5

      32819b63faeb54f43efcc84a311b6cb9

    • SHA1

      68948c48f46b88e3356fecc259bda2a3f3ddb7ae

    • SHA256

      2c22d076aadd52415a19a1b3f25fa680e9176ddf236fbd20e6ea7c521d14e184

    • SHA512

      2c04a722ae272381375ed30950c403a7c673e9f0758dd4f00a78b69e029e92f63a12f97359c6e376a69603919139fb173c0c4894970ad24515dc600379b12580

    • SSDEEP

      768:e34dJ9LOZoJPgqNS5T+dwRt68tZBCOHkPKs6MXC5RQZ5B+byEVzvs:e3IjLAoJdG+dwb6kvCOEiMXmQI/js

    Score
    3/10
    • Target

      SAM.Picker.exe

    • Size

      51KB

    • MD5

      ecde7ea1b21cfc69aac007859a23581a

    • SHA1

      98d66ccb4735fc9e8d5cb511106f1f555c051d5f

    • SHA256

      3f393afa3e341a3b46b7455a7dfbaab4c51c21939c911f1c1cda27b7f5eccb9b

    • SHA512

      a0da74c379a1ed2e11e60adeae074f666e99d1cba3be2f41b8c1547239f4b8fac365408540b9904fa1e4f180abecc7cc631e92ce412dd6fa30af07143dccfb1a

    • SSDEEP

      768:XobfAp/3GcLvmxzYogzDn3/q7SvFwJ+PUF8Kvs:AWGWm2osn3O/MNas

    Score
    3/10
    • Target

      git-log.txt

    • Size

      11KB

    • MD5

      62801c715399d9088df4b9133a55e2ba

    • SHA1

      b2aa9bfb4694a1058089f254cc56a78bdd04b364

    • SHA256

      e0498a5a2b4bbe259690b3f93379c00c07f4be3b292d4ff4c5e4f5ae4d0caf6d

    • SHA512

      cab2c01037d1656503ec64833dbaa76df6595dd6fceec90d51688af2d470d8e9b2e848a75cf907e5bcc6e37447a1d4e133500681c8d76851fd7a9c142008af05

    • SSDEEP

      192:GdD1lIfJjGF+uTIPRgSOLykSf8XBaLJv+EUIXspvAzXHv0xpwE8O:zfJjGFMR/QykSfRtv+cXspvOXH8xpwe

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks