General
- Target Among Us - SteamGG.NET.zip
- Size 696.3MB
- Sample260723-w8g9favdnb
- SHA256 a70a32115efc31527f69e73c2e14144e8194130b54f4dd451303a70a2c83aedc
- MD5 f941e90905cd4b788dd404a37f19d2d3
- SHA1 fd585c6692e311046d91b93c8acef4a6ebc84ec8
- SHA512 09690b88c2ddc6b64c5d714dc16507c3442afdcd9d999642a58b923126aff5b9e8e17d530a0eef1bdf76c267b7578b144806c5bf73e3fc59c8180c3096efca38
- SSDEEP 12582912:8SEaOqicBLBrQY/xDbhIKztl2O3sNnz4PfBnuUngOvBuh803+P8INM3QfniQFQ1k:8SEa6coqCKzmOcxmfpuUngO4no8aMgaa
- TLSH T1C37933896D6C4F9EF563A019E0302ACB021EA12E558E4DF97C5B96E47CD3BF046AF311
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Among Us - SteamGG.NET.zip
Resource
win10ltsc2021-20260513-en
12 signatures
900 seconds
Behavioral task
behavioral2
Sample
Among Us - SteamGG.NET.zip
Resource
win11ltsc2024-20260709-en
21 signatures
900 seconds
Malware Config
Targets
-
- Target Among Us - SteamGG.NET.zip
- Size 696.3MB
- SHA256 a70a32115efc31527f69e73c2e14144e8194130b54f4dd451303a70a2c83aedc
- MD5 f941e90905cd4b788dd404a37f19d2d3
- SHA1 fd585c6692e311046d91b93c8acef4a6ebc84ec8
- SHA512 09690b88c2ddc6b64c5d714dc16507c3442afdcd9d999642a58b923126aff5b9e8e17d530a0eef1bdf76c267b7578b144806c5bf73e3fc59c8180c3096efca38
- SSDEEP 12582912:8SEaOqicBLBrQY/xDbhIKztl2O3sNnz4PfBnuUngOvBuh803+P8INM3QfniQFQ1k:8SEa6coqCKzmOcxmfpuUngO4no8aMgaa
- TLSH T1C37933896D6C4F9EF563A019E0302ACB021EA12E558E4DF97C5B96E47CD3BF046AF311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Downloads MZ/PE file
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.