SteamBoosterSetup[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SteamBoosterSetup.exe
Size 3.9MB
Sample260627-vdhfaacv2m
SHA256 09c4f8262c74179f6f9bf776866f8bc1873ed8ce6b5e258c03d30ea344ad7678
MD5 cbeee5807322b86932dcd5c839d8f6bf
SHA1 3ca16328f9efafbf8ea29529120450be1aa4f8ac
SHA512 9aa07013a83ad73d7a89d9b8e6a92383d1bf6633cd1d19ea583deabeb65454b796b78fbc31fa5a1f33b1c79964fc3fc643d8a7b35c48ebecb3d3f5f575ede292
SSDEEP 98304:cDz2a2xlwurTS4BO63iXhmoGlM7I1TnRZNpw3+Sq7:gz2a+SooXhmoGlM7I1TnHNS27
TLSH
T194169D27A7E801E9C0B7C1B8CA578723E772B4191375A7DF1AE08A561F236E15E3E701
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

SteamBoosterSetup.exe

.exe 3.9MB

SteamBoosterSetup.exe

IMPHASH 402bc472ec38aeb722f0d8b6ccaf2cf6
SHA256 09c4f8262c74179f6f9bf776866f8bc1873ed8ce6b5e258c03d30ea344ad7678
MD5 cbeee5807322b86932dcd5c839d8f6bf
SHA1 3ca16328f9efafbf8ea29529120450be1aa4f8ac
SHA512 9aa07013a83ad73d7a89d9b8e6a92383d1bf6633cd1d19ea583deabeb65454b796b78fbc31fa5a1f33b1c79964fc3fc643d8a7b35c48ebecb3d3f5f575ede292
SSDEEP 98304:cDz2a2xlwurTS4BO63iXhmoGlM7I1TnRZNpw3+Sq7:gz2a+SooXhmoGlM7I1TnHNS27
TLSH
T194169D27A7E801E9C0B7C1B8CA578723E772B4191375A7DF1AE08A561F236E15E3E701
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

29:a9:6c:6d:51:10:e2:9d:a0:cf:f2:45:9f:e4:8c:de:ca:08:a9:02:e2:ca:43:1f:db:94:3d:1b:ef:0f:67:23

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=CYBERMID LIMITED,O=CYBERMID LIMITED,L=New York,ST=New York,C=US

Chains

Jun 24, 2026

CN=CYBERMID LIMITED,O=CYBERMID LIMITED,L=New York,ST=New York,C=US

CN=Microsoft ID Verified CS EOC CA 03,O=Microsoft Corporation,C=US

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Serial Number

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Apr 16, 2020 - Apr 16, 2045

Subject

CN=CYBERMID LIMITED,O=CYBERMID LIMITED,L=New York,ST=New York,C=US

Serial Number

33:00:02:45:02:4c:95:91:be:fe:95:83:f9:00:00:00:02:45:02

Issuer

CN=Microsoft ID Verified CS EOC CA 03,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 23, 2026 - Jun 26, 2026

Subject

CN=Microsoft ID Verified CS EOC CA 03,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:15:05:3e:6e:19:8e:93:29:d9:00:00:00:00:00:15

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Mar 26, 2026 - Mar 26, 2031

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 1, 2021 - Apr 1, 2036

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 19, 2020 - Nov 19, 2035

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:7A1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:5b:4a:b5:8d:41:32:6d:dc:74:00:00:00:00:00:5b

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 8, 2026 - Jan 7, 2027

Minor OS version

Major OS version

Entry point

2518152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

wsock32

inet_ntoa closesocket htonl htons socket WSAGetLastError __WSAFDIsSet select WSASetLastError recv send connect WSAStartup setsockopt WSACleanup bind accept getsockname getsockopt recvfrom listen

crypt32

CertOpenStore CertCloseStore CertEnumCertificatesInStore CertFreeCertificateContext CryptStringToBinaryW CertFreeCertificateChain CertGetCertificateChain CertFreeCertificateChainEngine CertCreateCertificateChainEngine CryptQueryObject CertGetNameStringW CertFindExtension CertFreeCTLContext CertAddCertificateContextToStore CertFreeCRLContext CryptDecodeObjectEx PFXImportCertStore CertFindCertificateInStore

bcrypt

BCryptGenRandom

advapi32

CryptCreateHash RegDeleteKeyExW RegSetValueExW RegQueryValueExW RegOpenKeyExW RegDeleteValueW RegCreateKeyExW RegCloseKey ConvertSidToStringSidW GetTokenInformation OpenProcessToken RegDeleteTreeW SystemFunction036 CryptAcquireContextW CryptReleaseContext CryptEncrypt CryptImportKey CryptDestroyKey CryptDestroyHash CryptHashData RegDeleteKeyW CryptGetHashParam

secur32

InitSecurityInterfaceW

ws2_32

WSACreateEvent WSACloseEvent WSAEnumNetworkEvents WSAEventSelect WSAWaitForMultipleEvents inet_pton getaddrinfo freeaddrinfo getpeername WSAIoctl WSAResetEvent gethostname ntohs sendto

iphlpapi

if_nametoindex

shell32

ShellExecuteW Shell_NotifyIconW SHGetKnownFolderPath SHChangeNotify

user32

GetMessageW PostMessageW DefWindowProcW PostQuitMessage RegisterClassExW CreateWindowExW DestroyWindow SetTimer KillTimer RegisterWindowMessageW MessageBoxW TranslateMessage DispatchMessageW GetSystemMetrics InvalidateRect PeekMessageW CharLowerBuffW AppendMenuW CreatePopupMenu GetMonitorInfoW MonitorFromPoint LoadCursorW SetWindowLongPtrW GetWindowLongPtrW ScreenToClient SetCursor RedrawWindow ValidateRect SetFocus SetWindowPos TrackMouseEvent GetWindowThreadProcessId GetClassNameW EnumWindows GetWindowRect GetWindowTextLengthW GetWindowTextW SetWindowTextW IsWindowVisible LoadImageW DestroyIcon LoadIconW GetCursorPos SetForegroundWindow TrackPopupMenu DestroyMenu ShowWindow

rpcrt4

UuidCreate UuidToStringA RpcStringFreeA

dbghelp

MiniDumpWriteDump

d2d1

ord1

dwrite

DWriteCreateFactory

dcomp

DCompositionCreateDevice

d3d11

D3D11CreateDevice

kernel32

FlsGetValue FlsSetValue FlsFree GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetCommandLineA ExitProcess SetFilePointerEx GetConsoleOutputCP ReadConsoleW FlsAlloc FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetDriveTypeW FreeLibraryAndExitThread ExitThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetStdHandle GetTimeZoneInformation RtlUnwindEx GetStartupInfoW InitializeSListHead UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetStringTypeW LCMapStringEx GetCPInfo CompareStringEx DecodePointer EncodePointer IsProcessorFeaturePresent CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork FreeLibraryWhenCallbackReturns WakeAllConditionVariable WakeConditionVariable GetExitCodeThread InitOnceComplete InitOnceBeginInitialize RtlPcToFileHeader GetTickCount64 SleepConditionVariableSRW TryAcquireSRWLockExclusive GetFileInformationByHandleEx AreFileApisANSI GetTempPathW GetLocaleInfoW GetFileInformationByHandle GetFileAttributesExW GetFileAttributesW FindFirstFileExW CreateDirectoryW GetCurrentDirectoryW GetLocaleInfoEx IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapReAlloc SetEndOfFile IsValidCodePage DebugBreak CloseHandle GetLastError HeapAlloc HeapFree GetProcessHeap GetCurrentProcessId GetCurrentThreadId FreeLibrary GetModuleFileNameA GetModuleHandleW GetModuleHandleExW GetProcAddress LoadLibraryW FormatMessageW WideCharToMultiByte MultiByteToWideChar IsDebuggerPresent OutputDebugStringW SetLastError ReleaseSemaphore ReleaseMutex WaitForSingleObject WaitForSingleObjectEx OpenSemaphoreW CreateMutexExW CreateSemaphoreExW CreateFileW SetUnhandledExceptionFilter SetErrorMode GetCurrentProcess CreateMutexW LocalFree FlushFileBuffers WriteFile MoveFileExW WaitForMultipleObjects TerminateProcess CreateProcessW OpenProcess QueryFullProcessImageNameW CreateToolhelp32Snapshot Process32FirstW RtlUnwind DuplicateHandle CreateEventW DeleteFileW GetModuleFileNameW LoadResource LockResource SizeofResource FindResourceW GetCommandLineW SetEvent OpenEventW GetDiskFreeSpaceExW GetVolumeInformationW ReadProcessMemory GetFinalPathNameByHandleW QueryPerformanceCounter QueryPerformanceFrequency MulDiv FindClose FindFirstFileW FindNextFileW CopyFileW Sleep GetStdHandle GetConsoleMode WriteConsoleA GetConsoleScreenBufferInfo SetConsoleTextAttribute WriteConsoleW InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetSystemInfo RaiseException ResetEvent CreateEventA FormatMessageA GetSystemTimeAsFileTime MoveFileExA ReleaseSRWLockExclusive AcquireSRWLockExclusive GetFullPathNameW SleepEx InitializeCriticalSectionEx DeleteCriticalSection GetEnvironmentVariableA VerSetConditionMask VerifyVersionInfoW GetFileType ReadFile PeekNamedPipe CreateThread GetFileSizeEx GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW HeapSize SetFileInformationByHandle Process32NextW

ole32

CoTaskMemFree CoUninitialize CoInitializeEx CoCreateInstance PropVariantClear CoTaskMemAlloc CreateStreamOnHGlobal

Sharing

General

Malware Config

Signatures

File Explorer

SteamBoosterSetup.exe

wsock32

crypt32

bcrypt

advapi32

secur32

ws2_32

iphlpapi

shell32

user32

rpcrt4

dbghelp

d2d1

dwrite

dcomp

d3d11

kernel32

ole32

generic