General
- Target Half-Life-SteamRIP.com.rar
- Size 290.2MB
- Sample260712-djkn6aev3t
- SHA256 a586fd2d4d44ff73df1f5e501e39fc412da2beb75b3f2549cf77f7ec6b81ad2f
Malware Config
Targets
-
- Target Half-Life-SteamRIP.com.rar
- Size 290.2MB
- SHA256 a586fd2d4d44ff73df1f5e501e39fc412da2beb75b3f2549cf77f7ec6b81ad2f
Score1/10 -
- Target Half-Life/Core.dll
- Size 274KB
- SHA256 5a773054ad19f33adbcb77201e44cec9a3698bdd22e352df028c165a9e75600d
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Half-Life/DemoPlayer.dll
- Size 134KB
- SHA256 f5390b2a0df777991cebe936045f19d85195eff03a947dda480a4606082c2181
Score3/10 -
- Target Half-Life/FileSystem_Stdio.dll
- Size 122KB
- SHA256 d73c38f0a90e04aedc66a20599faea2449aa345f6a124436ab655ecb02c151a2
Score3/10 -
- Target Half-Life/Mss32.dll
- Size 436KB
- SHA256 3231d251c8aa4003b3b23196fe849b97c5ea3ac2d3549980e83bceb9078b4cf7
Score3/10 -
- Target Half-Life/SDL2.dll
- Size 637KB
- SHA256 f1be4b46ac46bc9a26ae017c95711e5aedc11ed602908b62eface4e8d2b28aba
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Half-Life/a3dapi.dll
- Size 206KB
- SHA256 f05b2eeb851b174ef2b39c4728687915648ae33780a65cdf7f0c7ce99e6a67af
Score3/10 -
- Target Half-Life/avcodec-53.dll
- Size 1.0MB
- SHA256 f5522d2c936de8d53f97a6ec439d8f8391cb50a0bc6008a399f9454c00929d35
Score3/10 -
- Target Half-Life/avformat-53.dll
- Size 187KB
- SHA256 ac1f83180e07ac2b3d1e6f80f94aee0b2591be13e8a1fe63998cf7f0a9f18f1e
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Half-Life/avutil-51.dll
- Size 121KB
- SHA256 84e6875f1869b8cfd73525f0c04f1bf2cf0d0d08b1226f62cfd44ff14fe0345d
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Half-Life/binkawin.asi
- Size 54KB
- SHA256 1aba951f3d3de59aec6c3a77133241dac6949dd4b1d158a77b646ad1ec7c5371
Score3/10 -
- Target Half-Life/chromehtml.dll
- Size 854KB
- SHA256 b2b88a7555e598d5d84957de6e60c66260bd1683e2ef7a0008d17f55ce5bd790
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Half-Life/hl.exe
- Size 98KB
- SHA256 08ae290d025e3e3000f5264dce450e78d25ba1d931ff10f3e7992addbf44791a
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Half-Life/hlds.exe
- Size 394KB
- SHA256 bd5b37ec60301ff243beb114cbb69bf5213cbc3330496226558df912349ac96d
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Half-Life/hltv.exe
- Size 250KB
- SHA256 f382d8f879ed576ced9c472efc9d34fe9a1ce56031ee0b4d22b0e40127f460c9
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Half-Life/hw.dll
- Size 1.6MB
- SHA256 be45f76049a133392423679d334c69c8e1e7e82dc873eebdd229ea0341ba1b10
Score3/10 -
- Target Half-Life/icudt.dll
- Size 9.5MB
- SHA256 a20010e097e5a4ae7f7065da7b290cb535d1ef98a6a7cc299a343e26d688aa5d
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Half-Life/libcef.dll
- Size 19.4MB
- SHA256 391b7e66004d7845f5caa7d70f106dac7d0b49538954c55601ed7b5985c3d699
Score3/10 -
- Target Half-Life/mssmp3.asi
- Size 70KB
- SHA256 dd69f9509a50db36ea6f69f5f572c300dead7f0054801a255feb556e00a453ec
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Half-Life/mssvoice.asi
- Size 149KB
- SHA256 e99de0f5e95a70b84596a66aa1af8eb7f20cb9816e1fc67dbdd8f0feab1b26ac
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Half-Life/proxy.dll
- Size 266KB
- SHA256 64a288e7aa3c1c45bfe720c545cc38ac931627323209baf2c255a918d3f0272d
Score3/10 -
- Target Half-Life/steam_api.dll
- Size 1.4MB
- SHA256 47faf63ce14e765614dce2a27f1b876640be3cc3645cd33ecb2345d19627d3b7
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Half-Life/steam_api64.dll
- Size 1.9MB
- SHA256 eb9b78ef3c339591c1993c9c364098de386edd391e1169ea0a6daa39ae9735a9
Score1/10 -
- Target Half-Life/sw.dll
- Size 1.5MB
- SHA256 699870423ee279e31646a03ae9f217a137902a9c8db143ffec056caba7bbafac
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Half-Life/swds.dll
- Size 1.5MB
- SHA256 d01fdda605db55e00c399b9d4773097ddbf6e64709a0125621d66093cc02df42
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Half-Life/tier0.dll
- Size 331KB
- SHA256 55e64559ba6acc4c0efc3bef92382714a6b9b8a4bd4696e8c920e709c803b250
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Half-Life/valve/gfx/env/cliffrt.tga
- Size 192KB
- SHA256 9883d90f48ab62ff29e5e59dec0a1bf955da2e4c5b4f9fcd60eb56d01245ac26
Score3/10 -
- Target Half-Life/valve/overviews/frenzy.tga
- Size 1.3MB
- SHA256 dbfc9c0e926679cf45fa23299f1ccb6f989b9de81f01d5f49179a2e0055c449b
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Half-Life/valve/settings.scr
- Size 2KB
- SHA256 42574235ec4e6767cc895d2b8d9d4c2456fb1077e604b560b99a77012c0b7d11
Score1/10 -
- Target Half-Life/valve/sound/ambience/rocket_steam1.wav
- Size 57KB
- SHA256 d2b65ead56a6edfa4b401e03a0692c8bfcab2e2a3f2166c7cff2a6131f9a0d32
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target Half-Life/vgui.dll
- Size 390KB
- SHA256 f93e9f324c209118263b65644fa1f471e24a99dc3510c1763a733db9f3b01e91
Score3/10