Overview
overview
7Static
static
3Steam_Prow....0.exe
windows10-2004-x64
7Steam_Prow....0.exe
windows11-21h2-x64
7$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-21h2-x64
3Prowler.exe
windows10-2004-x64
7Prowler.exe
windows11-21h2-x64
7General
- Target Steam_Prowler_Setup_v2.0.0.exe
- Size 9.4MB
- Sample260415-v36jeahw9x
- SHA256 4d05b42cbbb7953c04f9abc0464f0a98fa2a3c03ecbf50dc06f28d2e3382d453
- MD5 7e931695dc2933869d04932a6fea8244
- SHA1 6ad52491e22d25cb5a3f607a535b44dfbb6c7803
- SHA512 0a8bbdaac4e9d2925afa89667c40064c44e17d950dd6fd4bca35af4f05cbf304c98ea65448857671aacacbe3e39d4b045424d5f6a173f88ef304e93ad8630501
- SSDEEP 196608:ElmRsrm1IlEET9k4HMHOh0YlvJiPA1vbzMlqzna3qZQdLv40AFMB60vK7ZIiGirq:ElTLlECWu2YlvIGTxpxFati7WoC4QBig
- TLSH T1FAA63353CA90A420D02386F8FA3B9FAD19FE1880F5BD68855962635421DCFDCEFD7921
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Steam_Prowler_Setup_v2.0.0.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
Steam_Prowler_Setup_v2.0.0.exe
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
Prowler.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
Prowler.exe
Resource
win11-20260130-en
Malware Config
Targets
-
- Target Steam_Prowler_Setup_v2.0.0.exe
- Size 9.4MB
- SHA256 4d05b42cbbb7953c04f9abc0464f0a98fa2a3c03ecbf50dc06f28d2e3382d453
- MD5 7e931695dc2933869d04932a6fea8244
- SHA1 6ad52491e22d25cb5a3f607a535b44dfbb6c7803
- SHA512 0a8bbdaac4e9d2925afa89667c40064c44e17d950dd6fd4bca35af4f05cbf304c98ea65448857671aacacbe3e39d4b045424d5f6a173f88ef304e93ad8630501
- SSDEEP 196608:ElmRsrm1IlEET9k4HMHOh0YlvJiPA1vbzMlqzna3qZQdLv40AFMB60vK7ZIiGirq:ElTLlECWu2YlvIGTxpxFati7WoC4QBig
- TLSH T1FAA63353CA90A420D02386F8FA3B9FAD19FE1880F5BD68855962635421DCFDCEFD7921
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Prowler.exe
- Size 12.7MB
- SHA256 c710bd9a291db2e5c8fdc732e2676508defe98997a057348b2875db45fcb8962
- MD5 d8a543f02ab3a23fbf55f59eec0b9811
- SHA1 163bc82f4b654d07271113dbb8a8ada45ccabac7
- SHA512 d5550caf5cb9a3b64546a329eeb3ec8a1541bfdb117fdd4b415f812bc1f7f5e545b5dd576f9d1717ddb6eb80585e43b7f94db5a35334a631bbc23c395c0772cd
- SSDEEP 196608:SkQ1/QfhDexaxihfAHuOqZDODM70hbfi0R9EpANPOwR/:K6xeccPXtY9E2OwR
- TLSH T1E1D6F123B1A142F8C456C0349B879727DA72B8491B3465DF13D48B642FA7FE02F3EA95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL