General
- Target Goldberg_Lan_Steam_Emu_master--475342f0 (1).zip
- Size 18.5MB
- Sample260724-n9d96sysgv
- SHA256 8465984b01b42a75f5faea8f2d884bbd6085a695c40c2b90eb0385f0a5081266
Malware Config
Targets
-
- Target Goldberg_Lan_Steam_Emu_master--475342f0 (1).zip
- Size 18.5MB
- SHA256 8465984b01b42a75f5faea8f2d884bbd6085a695c40c2b90eb0385f0a5081266
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target experimental/steam_api.dll
- Size 2.4MB
- SHA256 33585536081b1e6f4bc1e5cc91f16d5513822cb0510546446c2e9be35d08b74f
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target experimental/steam_api64.dll
- Size 3.1MB
- SHA256 286f2ed575fb16bba9c451bdf5c8738b5aa6587ec7831830cfae1739c6347edd
Score1/10 -
- Target experimental/steamclient.dll
- Size 72KB
- SHA256 3554fa409a7df923465fa2647a26de31bbdcc96a7f2e42e432a2aa7169774400
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target experimental/steamclient64.dll
- Size 87KB
- SHA256 7f9fabf5055db099c90b952739e970cd6aab01171d1a980bf96fe9b77885a6a6
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target experimental_steamclient/steamclient.dll
- Size 2.3MB
- SHA256 23b86547d3733d7909f4a3cf680441c166a8dccc651f30f7f44b58e5bf5ab8c1
Score3/10 -
- Target experimental_steamclient/steamclient64.dll
- Size 2.9MB
- SHA256 4c2813290f2547d92d40d7dc0a54d9ffbdce9a3d44c055b45a496366d829be5d
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target experimental_steamclient/steamclient_loader.exe
- Size 98KB
- SHA256 6d76785ff9806540c469c3b466eeacacb5d129d38723d53936a90b419f22a5a0
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target lobby_connect/lobby_connect.exe
- Size 1.3MB
- SHA256 2222c3e91ac406265392120b9592c6b02de373d57351b9d3feb798c71e49d080
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target steam_api.dll
- Size 1.4MB
- SHA256 eaeaf26f60229ae4d1a9aae07d03ab4e93ea599dd883eb810d6adebcf0e52e14
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target steam_api64.dll
- Size 1.9MB
- SHA256 0cfe547ea82071953cf99daffa3bd11bb468eec0e400961e7e33e4dc36674ea8
Score1/10