Overview
overview
8Static
static
5SteamML_On...64.dll
windows10-2004-x64
5SteamML_On...64.dll
windows11-ltsc_2024-x64
5SteamML_On...tp.dll
windows10-2004-x64
1SteamML_On...tp.dll
windows11-ltsc_2024-x64
1SteamML_On...mm.dll
windows10-2004-x64
5SteamML_On...mm.dll
windows11-ltsc_2024-x64
5SteamML_On...her.py
windows10-2004-x64
3SteamML_On...her.py
windows11-ltsc_2024-x64
8Analysis
- max time kernel
148s - max time network
123s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260706-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
07/07/2026, 22:39
Behavioral task
behavioral1
Sample
SteamML_Online_Patcher/PatcherFiles/unsteam64.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
SteamML_Online_Patcher/PatcherFiles/unsteam64.dll
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral3
Sample
SteamML_Online_Patcher/PatcherFiles/winhttp.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
SteamML_Online_Patcher/PatcherFiles/winhttp.dll
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral5
Sample
SteamML_Online_Patcher/PatcherFiles/winmm.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
SteamML_Online_Patcher/PatcherFiles/winmm.dll
Resource
win11ltsc2024-20260706-en
Behavioral task
behavioral7
Sample
SteamML_Online_Patcher/SteamML_Online_Patcher.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
SteamML_Online_Patcher/SteamML_Online_Patcher.py
Resource
win11ltsc2024-20260706-en
General
- Target SteamML_Online_Patcher/PatcherFiles/unsteam64.dll
- Size 352KB
- Sample260707-2k6vsaf14n
- SHA256 07c70d7cb366da4e1769012ae0f5f09fbd03c198c9fcff11e91acd1c1339c3c0
- MD5 71cd1bc714386d416e67a21be61cf85a
- SHA1 99f64d03c15e2133e1993375b9722c6677cf886f
- SHA512 87a5570f3275d836f487041f02f97addbe894452ef43840758c59f81b477b7a3525c7685646f503d74ab8cc8320b49be2aacdb3358859da82556018495e5591a
- SSDEEP 6144:4IQFU1uOfDchMM3Wndm1+M3aFxm70a6nfnAhdnvAG76XDLYhCrepl:bCUQOfQhMLmyFxs0TUlvAO67e
- TLSH T1447423F7B02E9163EAB26633CF2E2DC9074D1081F48AFD51DE9C9A0F25196DB170742A
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Drops file in System32 directory 1 IoCs
description ioc Process File created C:\Windows\system32\unsteam.ini rundll32.exe -
resource yara_rule behavioral2/memory/5536-1-0x00007FFE1D640000-0x00007FFE1D788000-memory.dmp upx