General
-
Target
SteamSetup.exe
-
Size
2.3MB
-
Sample
241022-hxk93avgnp
-
MD5
1b54b70beef8eb240db31718e8f7eb5d
-
SHA1
da5995070737ec655824c92622333c489eb6bce4
-
SHA256
7d3654531c32d941b8cae81c4137fc542172bfa9635f169cb392f245a0a12bcb
-
SHA512
fda935694d0652dab3f1017faaf95781a300b420739e0f9d46b53ce07d592a4cfa536524989e2fc9f83602d315259817638a89c4e27da709aada5d1360b717eb
-
SSDEEP
49152:UDP/q9MIX/crfcNVBaXp1m0zyVCMwBHgFzoZhRP8:kC9MI8Hm0GCjgFc3Rk
Static task
static1
Behavioral task
behavioral1
Sample
SteamSetup.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
SteamSetup.exe
-
Size
2.3MB
-
MD5
1b54b70beef8eb240db31718e8f7eb5d
-
SHA1
da5995070737ec655824c92622333c489eb6bce4
-
SHA256
7d3654531c32d941b8cae81c4137fc542172bfa9635f169cb392f245a0a12bcb
-
SHA512
fda935694d0652dab3f1017faaf95781a300b420739e0f9d46b53ce07d592a4cfa536524989e2fc9f83602d315259817638a89c4e27da709aada5d1360b717eb
-
SSDEEP
49152:UDP/q9MIX/crfcNVBaXp1m0zyVCMwBHgFzoZhRP8:kC9MI8Hm0GCjgFc3Rk
Score6/10-
Adds Run key to start application
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1