7dea38efe7eec48497274f8eb0c0c8d51888d626baeabc3cab4b659f6bded3ff

General

Target
steam-ticket-generator-windows.zip
Size 233KB
Sample260704-kep7eaht2m
SHA256 7dea38efe7eec48497274f8eb0c0c8d51888d626baeabc3cab4b659f6bded3ff
MD5 4c48607a28c4af10140a18e11b9813f4
SHA1 67dc9d2144b3869ebcb5c2a8e780a333f427cb13
SHA512 bde11139a64c40b241d2897ae1a2d41f1e7aeb747e6043776d4ca1df1d95d5944dacec311209179dc86b82ef9fc7090587e1a2d61f091ebcb5dfb7d19bf34027
SSDEEP 6144:+xL2059bk5xzIQTuPBcXmZa8gYIg29lJEl9gR+62FpdMy:SD9bk5+QUBcWZanYIXE9gkHpdMy
TLSH
T1ED3412A2C0A5E17AE517F8771C63F13019E39CE63D81850886B6CBCCD6605B1D768EFA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  steam-ticket-generator-windows.zip
- Size 233KB
- SHA256 7dea38efe7eec48497274f8eb0c0c8d51888d626baeabc3cab4b659f6bded3ff
- MD5 4c48607a28c4af10140a18e11b9813f4
- SHA1 67dc9d2144b3869ebcb5c2a8e780a333f427cb13
- SHA512 bde11139a64c40b241d2897ae1a2d41f1e7aeb747e6043776d4ca1df1d95d5944dacec311209179dc86b82ef9fc7090587e1a2d61f091ebcb5dfb7d19bf34027
- SSDEEP 6144:+xL2059bk5xzIQTuPBcXmZa8gYIg29lJEl9gR+62FpdMy:SD9bk5+QUBcWZanYIXE9gkHpdMy
- TLSH
  T1ED3412A2C0A5E17AE517F8771C63F13019E39CE63D81850886B6CBCCD6605B1D768EFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  steam-ticket-generator.exe
- Size 201KB
- SHA256 fdcade02ed5bd0c7bc350f2e4073cb9b31b3dbde5e6705cfc3015fc41fc3ba04
- MD5 0753cc5d03d9c7096533a8f049c9dfe3
- SHA1 396449faaff37401a73de013d61a7fedb47d3b02
- SHA512 f48ff2942645d852965cecb79be6d15c3e6c9a2378c4b90a3aec51ef04236e8b41a2b43c886035e957f9c5dbab466511c9c055379a9c27b269a06f5c5f696cec
- SSDEEP 3072:JWjG4TcoXN2xBWojFByAkAVbljoCTvKmxzcgITxsXpvGIbOEFCE:CBT1XN+BPjppxjoQvaTxyGIbOnE
- TLSH
  T1BE146C23B58484FDE80AC0B8C3458677EA76B8850B25A5FF069412356E7BEE77F3D604
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral3 behavioral4
- Target
  steam_api64.dll
- Size 312KB
- SHA256 e082bf5c9f881c822b1540a76b74f9d15e18019a73ebd206a559595badcb7f65
- MD5 3bae3a5ecad22eec751e154f68e09361
- SHA1 a951d17a2d9a9980c383db77e2ce688cb788b5e3
- SHA512 89a4af236cee7a6a93131288bb700827280f9f7d433ed1ec6c852efc60cc752ad4c3559909238e74d365459a0d4cf95411265339ceca19430f1698b605b96551
- SSDEEP 3072:Uf1NIIMByoNLNnLi+2qCPAgAU5gVsSleswKC+nQBx5lhTbC6Cy8iODQyN+7eiUMQ:sBMB/W+2qC4gAIuesBzOY0y0O2CL2U
- TLSH
  T1EF645B3962750CF4E077C13A88565E0FFA79344B23219EEF226062769E177C21EBB791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6