Resubmissions

23/11/2025, 02:32

251123-c1f7matkgm6

20/09/2025, 00:22

250920-apehjsaq2s8

17/09/2025, 22:01

250917-1xbpqsej2t8

17/09/2025, 21:56

250917-1tmmtsdr5z6

16/09/2025, 23:16

250916-288dhsbr216

16/09/2025, 23:00

250916-2y2g8a1zhw6

12/09/2025, 03:36

250912-d52vkafn3s7

14/04/2025, 18:37

250414-w9yb2sxmx37

14/04/2025, 18:37

250414-w9fr1axsfx1

14/04/2025, 18:36

250414-w9ejyaxsfv

General

  • Target
    st-setup-1.8.16.exe
  • Size 8.2MB
  • Sample250916-288dhsbr21
  • SHA256 80b6573208f2179c97ce64ff731269e349a07a3969c1198bf5a9092c5a01555c
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • st-setup-1.8.16.exe
    .exe 8.2MB
  • $PLUGINSDIR/System.dll
    .dll 37KB
  • $PLUGINSDIR/modern-header.bmp
    25KB
  • $PLUGINSDIR/modern-wizard.bmp
    150KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 26KB
  • $PLUGINSDIR/nsExec.dll
    .dll 22KB
  • Core.dll
    .dll 730KB
  • Qt5Core.dll
    .dll 5.7MB
  • Qt5Gui.dll
    .dll 6.7MB
  • Qt5Network.dll
    .dll 1.3MB
  • Qt5Svg.dll
    .dll 322KB
  • Qt5Widgets.dll
    .dll 5.2MB
  • SteamTools.exe
    .exe 1.7MB
  • imageformats/qico.dll
    .dll 37KB
  • msvcp140.dll
    .dll 612KB
  • msvcp140_1.dll
    .dll 30KB
  • platforms/qwindows.dll
    .dll 1.4MB
  • vcruntime140.dll
    .dll 83KB
  • vcruntime140_1.dll
    .dll 43KB

st-setup-1.8.16.exe

  • IMPHASH 9be4f90f50c714bc00cc8beb2e137299
  • SHA256 80b6573208f2179c97ce64ff731269e349a07a3969c1198bf5a9092c5a01555c
  • MD5 SHA1 SHA512 SSDEEP
Digest
18:71:85:23:c8:8c:2b:a8:13:8d:c1:f3:36:94:d4:20:6f:eb:a6:da:4a:a8:c1:c5:f6:3e:41:a3:fa:52:58:af
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91430103MADWKFRYXD,CN=Csnewnight Corporation,O=Csnewnight Corporation,L=Changsha,ST=Hunan,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13084368616e67736861,1.3.6.1.4.1.311.60.2.1.2=#130548756e616e,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
1
Major OS version
5
Entry point
17760
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED
PDB paths