General
- Target SteamAchievementManager-7.0.41.zip
- Size 55KB
- Sample260620-entnaset4x
- SHA256 6682a3330604aaf31f6916ddbf3b78251abda3a019d15a53b1ce33b72d5cd072
Score
8/10
Malware Config
Targets
-
- Target SteamAchievementManager-7.0.41.zip
- Size 55KB
- SHA256 6682a3330604aaf31f6916ddbf3b78251abda3a019d15a53b1ce33b72d5cd072
Score5/10-
Drops file in System32 directory
-
- Target LICENSE.txt
- Size 889B
- SHA256 e4bff363695d6fd3cc517cccf2821d8a0887389c49840f23a758920133a0f35c
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target SAM.API.dll
- Size 30KB
- SHA256 e4db6f021bca727323afd810443e82128367bcfa9e48d656fe401c8fd2b8b41a
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target SAM.Game.exe
- Size 48KB
- SHA256 0ceaf9bc7e9abe92f987e785633f9496d72c47eaabfd2bfc92d451a8d6f8d3f3
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target SAM.Picker.exe
- Size 51KB
- SHA256 84f8e85af6ce0ea961aa58fc0409b3089208c947931572e4ab0bddb15b6630fb
Score3/10 -
- Target git-log.txt
- Size 11KB
- SHA256 5c175aad47121c00db549f44e59b3e16c36e27fe8ed4dbeb9e8b236329d65ccf
Score1/10
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Netsh Helper DLL
1