General
- Target SteamTools.exe
- Size 71.7MB
- Sample260702-3j7lcsc16j
- SHA256 100595ce9f7c1a0fbc5e46fcd654424782698c8576308bb4088fea6bab5ca2a5
- MD5 24e602eac85243b6712a516da3b44d4b
- SHA1 030f0ae7c86f9f2b17eafe7453e00fd80816317d
- SHA512 1f2de8473db96be75a477a4db93248a51bb895f732b0a6a19a4502b388bf84d7aed72d16c464b3ce53ae6902cabfc7a94c50d6053ed5d71f5b62e4c22b1e76ba
- SSDEEP 1572864:tRXGMK4XR3b9CHSCU/+UyPlKVEWYWf+fx9jiIVaV+BbnQzZrd+aQw9P2q:tRgYRSSC++Uy9IEWYv0V+Bb2Rd+G4q
- TLSH T1B1F733A5E2A2048FEC471BBDA1734E62FB62B07FC7F5820D437D5036C25B5E08AE6915
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SteamTools.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
SteamTools.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target SteamTools.exe
- Size 71.7MB
- SHA256 100595ce9f7c1a0fbc5e46fcd654424782698c8576308bb4088fea6bab5ca2a5
- MD5 24e602eac85243b6712a516da3b44d4b
- SHA1 030f0ae7c86f9f2b17eafe7453e00fd80816317d
- SHA512 1f2de8473db96be75a477a4db93248a51bb895f732b0a6a19a4502b388bf84d7aed72d16c464b3ce53ae6902cabfc7a94c50d6053ed5d71f5b62e4c22b1e76ba
- SSDEEP 1572864:tRXGMK4XR3b9CHSCU/+UyPlKVEWYWf+fx9jiIVaV+BbnQzZrd+aQw9P2q:tRgYRSSC++Uy9IEWYv0V+Bb2Rd+G4q
- TLSH T1B1F733A5E2A2048FEC471BBDA1734E62FB62B07FC7F5820D437D5036C25B5E08AE6915
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates processes with tasklist