General
- Target SteamToolFixer.exe
- Size 18.0MB
- Sample260720-n7n2labw51
- SHA256 aa16e47fa7e1e667ce67f06b0c296ed2fe2e201f63267b18db9092540648c5f1
- MD5 7be820d3553e690bbd133a6152f3889b
- SHA1 b2de2e0bd16e05b7c5b2556b7a2af696ced38893
- SHA512 4a45610b23030cce2620baa1a44a4a758e099674802c2a0f61c00c832bba78b5c0321cacc27a11d0acdd2a62bd65cb1ebc08071f1d7b8f4782daaf03cc596d62
- SSDEEP 393216:4uiLoKjYnrZLrStZq5XpS2akHsxtEDweEQdKtD07Wl/oc:4Lr6VLrStZq5Va2wt7e1aDmc
- TLSH T177173369A395056BD8EB913C56E7C3B1F3B1A12027228DFF1B51072A2F6B4D0457E3B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
SteamToolFixer.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
SteamToolFixer.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target SteamToolFixer.exe
- Size 18.0MB
- SHA256 aa16e47fa7e1e667ce67f06b0c296ed2fe2e201f63267b18db9092540648c5f1
- MD5 7be820d3553e690bbd133a6152f3889b
- SHA1 b2de2e0bd16e05b7c5b2556b7a2af696ced38893
- SHA512 4a45610b23030cce2620baa1a44a4a758e099674802c2a0f61c00c832bba78b5c0321cacc27a11d0acdd2a62bd65cb1ebc08071f1d7b8f4782daaf03cc596d62
- SSDEEP 393216:4uiLoKjYnrZLrStZq5XpS2akHsxtEDweEQdKtD07Wl/oc:4Lr6VLrStZq5Va2wt7e1aDmc
- TLSH T177173369A395056BD8EB913C56E7C3B1F3B1A12027228DFF1B51072A2F6B4D0457E3B8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.