Overview
overview
7Static
static
3Steam_Prow....0.exe
windows10-2004-x64
7Steam_Prow....0.exe
windows11-21h2-x64
7$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-21h2-x64
3Prowler.exe
windows10-2004-x64
7Prowler.exe
windows11-21h2-x64
7Analysis
- max time kernel
149s - max time network
135s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
15/04/2026, 17:31
Static task
static1
Behavioral task
behavioral1
Sample
Steam_Prowler_Setup_v2.0.0.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
Steam_Prowler_Setup_v2.0.0.exe
Resource
win11-20260130-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
Prowler.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
Prowler.exe
Resource
win11-20260130-en
General
- Target Prowler.exe
- Size 12.7MB
- Sample260415-v36jeahw9x
- SHA256 c710bd9a291db2e5c8fdc732e2676508defe98997a057348b2875db45fcb8962
- MD5 d8a543f02ab3a23fbf55f59eec0b9811
- SHA1 163bc82f4b654d07271113dbb8a8ada45ccabac7
- SHA512 d5550caf5cb9a3b64546a329eeb3ec8a1541bfdb117fdd4b415f812bc1f7f5e545b5dd576f9d1717ddb6eb80585e43b7f94db5a35334a631bbc23c395c0772cd
- SSDEEP 196608:SkQ1/QfhDexaxihfAHuOqZDODM70hbfi0R9EpANPOwR/:K6xeccPXtY9E2OwR
- TLSH T1E1D6F123B1A142F8C456C0349B879727DA72B8491B3465DF13D48B642FA7FE02F3EA95
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Loads dropped DLL 1 IoCs
pid Process 2924 Prowler.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\evb1113.tmp
- Size 1KB
- SHA256 9c3929d4c93a7d3b7e84b1c2bce93eceea042bc71684b9565e8116f65fa1c9d1
- MD5 1ed23a103e2a1a16029846fffbf624aa
- SHA1 4a589145970f7048d5c25a2860bac49f4ae4ecbf
- SHA512 a0806f5e8a7209bf1394b6725aaab92771acec319d5c6b596b373c02a17301a5bcaa2924d7fb6d179da6b1f912fdb1a77514359f9edb3d6fc746f76de4878a82
- TLSH T1CD315E12D6208AB2C18D073896D6992C27B8AC3453E916560FB0047EEC893304A39D09
- MD5 SHA1 SHA512 TLSH