Overview
overview
3Static
static
3ExamplePlugin.zip
windows11-21h2-x64
1ExamplePlu...csproj
windows11-21h2-x64
3ExamplePlugin/Main.cs
windows11-21h2-x64
3ExamplePlu...nfo.cs
windows11-21h2-x64
3Plugins/Ex...in.dll
windows11-21h2-x64
3Plugins/Sh...sm.dll
windows11-21h2-x64
1Plugins/St...PI.dll
windows11-21h2-x64
3Plugins/St...86.dll
windows11-21h2-x64
1Plugins/St...86.dll
windows11-21h2-x64
3Plugins/St...86.dll
windows11-21h2-x64
3Plugins/St...64.dll
windows11-21h2-x64
3Plugins/St...86.dll
windows11-21h2-x64
3Plugins/St...64.dll
windows11-21h2-x64
3Plugins/St...86.dll
windows11-21h2-x64
3Steamless.CLI.exe
windows11-21h2-x64
3Steamless....config
windows11-21h2-x64
3Steamless.exe
windows11-21h2-x64
3Steamless.exe.config
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
97s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
01/07/2026, 03:31
Static task
static1
Behavioral task
behavioral1
Sample
ExamplePlugin.zip
Resource
win11-20260513-en
Behavioral task
behavioral2
Sample
ExamplePlugin/ExamplePlugin.csproj
Resource
win11-20260513-en
Behavioral task
behavioral3
Sample
ExamplePlugin/Main.cs
Resource
win11-20260513-en
Behavioral task
behavioral4
Sample
ExamplePlugin/Properties/AssemblyInfo.cs
Resource
win11-20260513-en
Behavioral task
behavioral5
Sample
Plugins/ExamplePlugin.dll
Resource
win11-20260513-en
Behavioral task
behavioral6
Sample
Plugins/SharpDisasm.dll
Resource
win11-20260513-en
Behavioral task
behavioral7
Sample
Plugins/Steamless.API.dll
Resource
win11-20260513-en
Behavioral task
behavioral8
Sample
Plugins/Steamless.Unpacker.Variant10.x86.dll
Resource
win11-20260513-en
Behavioral task
behavioral9
Sample
Plugins/Steamless.Unpacker.Variant20.x86.dll
Resource
win11-20260513-en
Behavioral task
behavioral10
Sample
Plugins/Steamless.Unpacker.Variant21.x86.dll
Resource
win11-20260513-en
Behavioral task
behavioral11
Sample
Plugins/Steamless.Unpacker.Variant30.x64.dll
Resource
win11-20260513-en
Behavioral task
behavioral12
Sample
Plugins/Steamless.Unpacker.Variant30.x86.dll
Resource
win11-20260513-en
Behavioral task
behavioral13
Sample
Plugins/Steamless.Unpacker.Variant31.x64.dll
Resource
win11-20260513-en
Behavioral task
behavioral14
Sample
Plugins/Steamless.Unpacker.Variant31.x86.dll
Resource
win11-20260513-en
Behavioral task
behavioral15
Sample
Steamless.CLI.exe
Resource
win11-20260513-en
Behavioral task
behavioral16
Sample
Steamless.CLI.exe.config
Resource
win11-20260513-en
Behavioral task
behavioral17
Sample
Steamless.exe
Resource
win11-20260513-en
Behavioral task
behavioral18
Sample
Steamless.exe.config
Resource
win11-20260513-en
General
- Target ExamplePlugin/Main.cs
- Size 3KB
- Sample260701-d3grlsfv3w
- SHA256 69a741d8393c4c64be2a0e8c9a4746b8e7907e8a43fcd1fd6af8b5de9b41bdcb
- MD5 3767fc65ea4d8bde688bbb2c8e77d3a8
- SHA1 2013da9aeecf4dc8892b00e2e6e114cea6c426fa
- SHA512 57d47048a852899c87484e4006e4f9f24451625b3099784449582f9049ead383c87f2f683a1d081b0f3f012db93eddc17df4a011ac5ada0a102fbcd14acb9fc9
- TLSH T129813E5EA1CACA321C7201616F03F0CBF316061B9156E972B5FD93962F718AD0277E5A
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1679180529-4058988202-686829476-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 704 OpenWith.exe