Overview
overview
3Static
static
3ExamplePlugin.zip
windows11-21h2-x64
1ExamplePlu...csproj
windows11-21h2-x64
3ExamplePlugin/Main.cs
windows11-21h2-x64
3ExamplePlu...nfo.cs
windows11-21h2-x64
3Plugins/Ex...in.dll
windows11-21h2-x64
3Plugins/Sh...sm.dll
windows11-21h2-x64
1Plugins/St...PI.dll
windows11-21h2-x64
3Plugins/St...86.dll
windows11-21h2-x64
1Plugins/St...86.dll
windows11-21h2-x64
3Plugins/St...86.dll
windows11-21h2-x64
3Plugins/St...64.dll
windows11-21h2-x64
3Plugins/St...86.dll
windows11-21h2-x64
3Plugins/St...64.dll
windows11-21h2-x64
3Plugins/St...86.dll
windows11-21h2-x64
3Steamless.CLI.exe
windows11-21h2-x64
3Steamless....config
windows11-21h2-x64
3Steamless.exe
windows11-21h2-x64
3Steamless.exe.config
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
149s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
01/07/2026, 03:31
Static task
static1
Behavioral task
behavioral1
Sample
ExamplePlugin.zip
Resource
win11-20260513-en
Behavioral task
behavioral2
Sample
ExamplePlugin/ExamplePlugin.csproj
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
ExamplePlugin/Main.cs
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
ExamplePlugin/Properties/AssemblyInfo.cs
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
Plugins/ExamplePlugin.dll
Resource
win11-20260513-en
Behavioral task
behavioral6
Sample
Plugins/SharpDisasm.dll
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
Plugins/Steamless.API.dll
Resource
win11-20260513-en
Behavioral task
behavioral8
Sample
Plugins/Steamless.Unpacker.Variant10.x86.dll
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
Plugins/Steamless.Unpacker.Variant20.x86.dll
Resource
win11-20260513-en
Behavioral task
behavioral10
Sample
Plugins/Steamless.Unpacker.Variant21.x86.dll
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
Plugins/Steamless.Unpacker.Variant30.x64.dll
Resource
win11-20260513-en
Behavioral task
behavioral12
Sample
Plugins/Steamless.Unpacker.Variant30.x86.dll
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
Plugins/Steamless.Unpacker.Variant31.x64.dll
Resource
win11-20260513-en
Behavioral task
behavioral14
Sample
Plugins/Steamless.Unpacker.Variant31.x86.dll
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
Steamless.CLI.exe
Resource
win11-20260513-en
Behavioral task
behavioral16
Sample
Steamless.CLI.exe.config
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
Steamless.exe
Resource
win11-20260513-en
Behavioral task
behavioral18
Sample
Steamless.exe.config
Resource
win11-20260513-en
General
- Target Steamless.exe.config
- Size 189B
- Sample260701-d3grlsfv3w
- SHA256 e8decc96235b5494880083eb79c22c84c6d9ef312828baf9490bee7782c350ec
- MD5 ef0181de18ef3951806c0ad63b897ba4
- SHA1 4b6a4b0f7fbbbd1dceab385e7fac74a35fc132cb
- SHA512 b1816817e8deaa7b22bc51966e9debed46b254be6463f2ac0204be348baefb751c5d846a5353d43cce66a005a73f6226462b8ec8b59d4e16a54130c327c68b79
- TLSH T10CC080554454BD274D334B1357528529EFB073A36424140CF01FE5560F3114D4657377
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-2746394149-3500112804-1243524366-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4944 OpenWith.exe