Overview

overview

3

Static

static

3

SteamtoolsSetup.exe

windows10-2004-x64

1

Resubmissions

18-11-2024 16:12

241118-tnl1sazena 3

18-11-2024 16:11

241118-tnamravner 3

Analysis

  • max time kernel
    68s
  • max time network
    64s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18-11-2024 16:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    SteamtoolsSetup.exe

  • Size

    978KB

  • MD5

    bbf15e65d4e3c3580fc54adf1be95201

  • SHA1

    79091be8f7f7a6e66669b6a38e494cf7a62b5117

  • SHA256

    c9f2e2abb046ff2535537182edf9a9b748aa10a22e98a1d8c948d874f4ffb304

  • SHA512

    9bb261b4ed84af846e07ffb6352960687e59428fd497faa0a37d70b57a1a7430d48ac350fbb0c3f0f11e4231a98ebca4d6923deba0949fdd7a247a3c02737355

  • SSDEEP

    24576:4Fa9OUi2VoN2gZ1M8UQag3BXrYZt+GgGTfG74T+TRcL:Z9OUiTN2gZ1MExEZkkf+4TARg

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\SteamtoolsSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\SteamtoolsSetup.exe"
    1⤵
      PID:924
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:3708
      • C:\Users\Admin\AppData\Local\Temp\SteamtoolsSetup.exe
        "C:\Users\Admin\AppData\Local\Temp\SteamtoolsSetup.exe"
        1⤵
          PID:2232
        • C:\Users\Admin\AppData\Local\Temp\SteamtoolsSetup.exe
          "C:\Users\Admin\AppData\Local\Temp\SteamtoolsSetup.exe"
          1⤵
            PID:1216

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads