Overview
overview
6Static
static
1st-setup-1.8.16.exe
windows11-21h2-x64
6$PLUGINSDI...em.dll
windows11-21h2-x64
1$PLUGINSDI...gs.dll
windows11-21h2-x64
1$PLUGINSDI...ec.dll
windows11-21h2-x64
1Core.dll
windows11-21h2-x64
3Qt5Core.dll
windows11-21h2-x64
1Qt5Gui.dll
windows11-21h2-x64
1Qt5Network.dll
windows11-21h2-x64
1Qt5Svg.dll
windows11-21h2-x64
1Qt5Widgets.dll
windows11-21h2-x64
1SteamTools.exe
windows11-21h2-x64
1imageformats/qico.dll
windows11-21h2-x64
1msvcp140.dll
windows11-21h2-x64
1msvcp140_1.dll
windows11-21h2-x64
1platforms/...ws.dll
windows11-21h2-x64
1vcruntime140.dll
windows11-21h2-x64
1vcruntime140_1.dll
windows11-21h2-x64
1Resubmissions
23/11/2025, 02:32
251123-c1f7matkgm620/09/2025, 00:22
250920-apehjsaq2s817/09/2025, 22:01
250917-1xbpqsej2t817/09/2025, 21:56
250917-1tmmtsdr5z616/09/2025, 23:16
250916-288dhsbr21616/09/2025, 23:00
250916-2y2g8a1zhw612/09/2025, 03:36
250912-d52vkafn3s714/04/2025, 18:37
250414-w9yb2sxmx3714/04/2025, 18:37
250414-w9fr1axsfx114/04/2025, 18:36
250414-w9ejyaxsfvAnalysis
- max time kernel
900s - max time network
592s - platform
windows11-21h2_x64 - resource
win11-20250610-en - resource tags
arch:x64arch:x86image:win11-20250610-enlocale:en-usos:windows11-21h2-x64system - submitted
16/09/2025, 23:16
Static task
static1
Behavioral task
behavioral1
Sample
st-setup-1.8.16.exe
Resource
win11-20250619-en
Behavioral task
behavioral2
Sample
$PLUGINSDIR/System.dll
Resource
win11-20250619-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11-20250610-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11-20250619-en
Behavioral task
behavioral5
Sample
Core.dll
Resource
win11-20250619-en
Behavioral task
behavioral6
Sample
Qt5Core.dll
Resource
win11-20250610-en
Behavioral task
behavioral7
Sample
Qt5Gui.dll
Resource
win11-20250619-en
Behavioral task
behavioral8
Sample
Qt5Network.dll
Resource
win11-20250619-en
Behavioral task
behavioral9
Sample
Qt5Svg.dll
Resource
win11-20250619-en
Behavioral task
behavioral10
Sample
Qt5Widgets.dll
Resource
win11-20250619-en
Behavioral task
behavioral11
Sample
SteamTools.exe
Resource
win11-20250610-en
Behavioral task
behavioral12
Sample
imageformats/qico.dll
Resource
win11-20250610-en
Behavioral task
behavioral13
Sample
msvcp140.dll
Resource
win11-20250619-en
Behavioral task
behavioral14
Sample
msvcp140_1.dll
Resource
win11-20250619-en
Behavioral task
behavioral15
Sample
platforms/qwindows.dll
Resource
win11-20250502-en
Behavioral task
behavioral16
Sample
vcruntime140.dll
Resource
win11-20250610-en
Behavioral task
behavioral17
Sample
vcruntime140_1.dll
Resource
win11-20250619-en
General
- Target SteamTools.exe
- Size 1.7MB
- Sample250916-288dhsbr21
- SHA256 7afcb8d488f34e284deef1559dbc0d46d1bd68e226928e5b583169a1fd275842
- MD5 e45bfb5edcc03451a85bc505298fbc16
- SHA1 7ffaf05f77882652cc66dca60da2de9550fe6430
- SHA512 8772a6e7a28d62c5bcf1161ffdda7124247a098e6e8ab56b45a71258c9c6524d695f1ea7109bd91027963a45ad6a36b8675dc174eaaf47ec27d3886390e03640
- SSDEEP 24576:YsCreC/B5DjyIY20J2mly2FpTEYq9cRqbxCfWydQ+tD:Ys8B5DmIi59ZEYqi8o5D
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 5012 SteamTools.exe - Suspicious use of FindShellTrayWindow 6 IoCs
pid Process 5012 SteamTools.exe 5012 SteamTools.exe 5012 SteamTools.exe 5012 SteamTools.exe 5012 SteamTools.exe 5012 SteamTools.exe - Suspicious use of SendNotifyMessage 6 IoCs
pid Process 5012 SteamTools.exe 5012 SteamTools.exe 5012 SteamTools.exe 5012 SteamTools.exe 5012 SteamTools.exe 5012 SteamTools.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 5012 SteamTools.exe 5012 SteamTools.exe 5012 SteamTools.exe 5012 SteamTools.exe