3ba855ef962205136a54fb32519a46362e0cc5b42fc2bb3667e4d21307d972e5

Sharing

Copy URL Twitter E-mail

General

Target
emu-win-release.7z
Size 12.9MB
Sample260727-nd85nsaf29
SHA256 3ba855ef962205136a54fb32519a46362e0cc5b42fc2bb3667e4d21307d972e5
MD5 4c6e445b3901e780c3abeb5f1cc5b489
SHA1 28bf73ee051f65b05e0a316f9aa12f32acf8c86d
SHA512 415d7274f451aac32f5efcb25c297b4ebafde59b375bee71bf9444dfbbd9874945029c9adac21fc87e88dedbae1a5104012c3269e0ced9347ba2034d90d196fc
SSDEEP 196608:UAFJMAbCXEdF5ZbjuZA7hO3eLcEUx9luZHFUYJo/UHbKfPB2195P8IGUnlatWhJ:vC0dFziZxuwEUx96HFzTHbKU19WolLL
TLSH
T19ED633760AADBDB8E51DEDB23115DA2C1120FD8D3BB4AB1500F6BDD64F639AB01AC1C4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Targets

- Target
  emu-win-release.7z
- Size 12.9MB
- SHA256 3ba855ef962205136a54fb32519a46362e0cc5b42fc2bb3667e4d21307d972e5
- MD5 4c6e445b3901e780c3abeb5f1cc5b489
- SHA1 28bf73ee051f65b05e0a316f9aa12f32acf8c86d
- SHA512 415d7274f451aac32f5efcb25c297b4ebafde59b375bee71bf9444dfbbd9874945029c9adac21fc87e88dedbae1a5104012c3269e0ced9347ba2034d90d196fc
- SSDEEP 196608:UAFJMAbCXEdF5ZbjuZA7hO3eLcEUx9luZHFUYJo/UHbKfPB2195P8IGUnlatWhJ:vC0dFziZxuwEUx96HFzTHbKU19WolLL
- TLSH
  T19ED633760AADBDB8E51DEDB23115DA2C1120FD8D3BB4AB1500F6BDD64F639AB01AC1C4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1
- Target
  release/experimental/x64/steam_api64.dll
- Size 21.7MB
- SHA256 efa90433e5e6d5eb4599ee199e0eb8605a7e3807f87ff865a67477c760dad555
- MD5 4579b56a95117e84bb47921e40644a24
- SHA1 7a1312e7db1a39d66284d271dd1d5bebfe9e393a
- SHA512 e48856120c3b23c04af0f4e1984b7cf38e19938fe79ae47e3016d10482ebc4df588c8e719ee56e6baf5118393f2a327cb288213264f8e3a18d7f3db11c009926
- SSDEEP 98304:/JmCpgElJawTzNLDfq9qKfnhPwo+FqBej1/wm71y+4AxYZgAE6EZDi7QZaR1vDgQ:/PvxFqoj1F7wciZgA72D8U4vXIStMU
- TLSH
  T192375B47E7BB01E4D6BAD03895B3623BFE717495833097DBA68056061F62BE0E93E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral2
- Target
  release/experimental/x64/steamclient64.dll
- Size 108KB
- SHA256 f3f06d9c3b9a834f258fbb2e411b7c83a670a5babab2e133c4b75c25356eaa64
- MD5 33999ff888f4cea54c2f30f04d6b4da6
- SHA1 e4110f769a660d2dd50797bc52d127a0409e4999
- SHA512 ee76fcf276d1b109d168d9043493ea12bc3f022126f4356de6bd537df5d452222b8add921310eaff8cc2c0ffdf4912a6197752f9269c131500a895efe5de66bf
- SSDEEP 3072:0ubl6vIUarDdg05g2G0dgAtWq0qZ331WNGsMtpsCP:QvIx/mPp0KAEazsMtf
- TLSH
  T104B32957B6E930ABE176C6788BB37A05D776B81507609BEF0360425A1F237E0CD39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3
- Target
  release/experimental/x86/steam_api.dll
- Size 19.1MB
- SHA256 5e2cd22bfac090aa868d8e479913c2d8cdd5e32f9570a67b83706fd99e277909
- MD5 4440185f5dc5efbb7b238a9fa77a1cec
- SHA1 f36a89ae85f63ac65eda3a3a73631ece76faf6fb
- SHA512 94f28da6dc72f9afdb5fa6660c278a6b0ee5b00c0cb7a3f9803fcb7bcea4b222363b135c02ef62beafecc466057d61ebdfafd8ef66afd44d5c5640537c42c093
- SSDEEP 393216:DfNpvcvxYlWb2wK8mnsmOoCwcIgA72Ra6die:DLjsZwcIgA72Rhj
- TLSH
  T14D17AE12E392D135FBB701F68AFA067E5B389F602B1402DB72C465494B76AD1FE32613
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  release/experimental/x86/steamclient.dll
- Size 90KB
- SHA256 f36cd4eaa96775e32949ff91b22cce1d7221f65ae52f494193c00f6e574b2f7d
- MD5 ff4905359dbfad7ed9aa98d7c5298431
- SHA1 a9726603d83636a33079d5bb82761a3b1acaf378
- SHA512 67858bfc0599c41ae57ece257c1d1e5d791ed426efcbcba71791a05064e557ae21af3705f94844cf7a19b2b5b4682787ecaeae8d52014ba9785cfce26f337db2
- SSDEEP 1536:/l29+6H+1lv3fzMVE/3jY+WNG1egQfHb19b7y0pI85wsW+Fcdwov8FMCCmk7uZt6:929+VR3fV/3ZWCegQfH/7yAI8MwjFMC6
- TLSH
  T19793290075D0F175D8BED9354B38BA75CB3EB950DBA0DDEB275402A94E302C1EE31A6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  release/regular/x64/steam_api64.dll
- Size 10.9MB
- SHA256 8b1bd0bea955aaeccd6de92d2a8c6208757dde038fd3c074113f0c2609e04de1
- MD5 f9e425cd265142d1f1028cbdb8f3e954
- SHA1 81806f2d3c63592110a350677f14ddeb50d832db
- SHA512 968c9dcda08b405dc5c3c169f6e65f7a53da63e3bd9cc2e335953158b7e9d7b041483e3b05770c55b83ed18d451ffa7298701778d457707d998bf2066dd906d0
- SSDEEP 98304:XCL5yNEDVAOYjTv9Ft3oOdKiXa/DQGtDS+K8dQzERLMPKDh5:XDVF8/DNtD3K8dUPKDD
- TLSH
  T1B7B60817E7BA01E4E5FAC1789663623BFDB13495933097DB9A80560B1B72BE0E93D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral6
- Target
  release/regular/x86/steam_api.dll
- Size 8.8MB
- SHA256 8e804d38cde295b1f08a6c41ecc8978fde69e53e2a6e22652017371a49cba1be
- MD5 f7e6ea890030f21ce2355257d02bf7db
- SHA1 79b9b430e5efb08b062486f1c9fcd6606ecb7b80
- SHA512 e29645d08df85164dfa500ea2da48c1cd12c6f36174194f010492968c3a527333c8a7df16e86526ecede067ead7e172636ca7b0d8c48e57d999dae7b39f21b8d
- SSDEEP 196608:3iR0y4FKV7lFJYHwbniKCsQLBm7UzjqtcL:3CFJYHwbniKCsdtcL
- TLSH
  T105968D22E2518039FAFB01F9C7FE4ABE5A7C5F612B1414DB53C4A48D0A369D1BE32653
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7
- Target
  release/steam_old_lib/Steam.dll
- Size 160KB
- SHA256 c8d600c9df0d4211964a64a7b5515b122e1f078092f74b11c67662ada4e42d47
- MD5 cbdc2832ab65c4838c2d466c65f09779
- SHA1 0652637e72bc338c79e86cede02c42a77476ea48
- SHA512 1e96b8fb3b1e2fa91506ae36788de57e330d1a699c7bf200c461e42379ed1f6df0cbafb0e2d246733278b19e2e4f20e27ff0839dd2abbef03910c29ffb059f4c
- SSDEEP 3072:L40a8/nVS5gZC37/VXFJeljtxthnkCSJ/XexbzzmaSXpsyTqrpPrzx6A8Dz:L40a8/nVogZY1IbJkxJ/czzeZ7qrzx6X
- TLSH
  T18FF33A15AC4188B1DF6F087548386E16DF29AE65C7F2BAE37B500EE548346CD8F34B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral8
- Target
  release/steam_settings.EXAMPLE/achievements_EXAMPLE.json
- Size 65KB
- SHA256 c90b571bd159618a8837f6e5f77ae254985d90df3634acda7f79f0d382bc75c8
- MD5 43f5f12838b2b05a0a08e4ce681b08ba
- SHA1 dfe48606af2042bb82463546c242840f55283662
- SHA512 3121a8f1c58a254d4abd748acf05003b9364bb3be5577fbfe94d4a91291a23760fd2918133b9e194f0cdeeef9a9482a600e01f9cfe773ae0fd25e24acb7494d9
- SSDEEP 1536:AtkapXFsMhpecr0w3loy+c0HSKhdPgebKOiRW09/y/n0/VLiRTH4+JImGHociSm2:/YN/j
- TLSH
  T14C630AA6DD506B33124D825A2CDBA66E2037525F1C387E497F58A48D3FAEC2F7532318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral9
- Target
  release/steam_settings.EXAMPLE/auto_accept_invite.EXAMPLE.txt
- Size 54B
- SHA256 ca8428b326b45e8137fa135a94ba95f721e4b01afcb086a18de3bf2ef345ffdc
- MD5 73676ec8f00e2e2f68e039883b95bd89
- SHA1 39ae93eb3c0dd9472a4d475ee2fba5a94d47cc53
- SHA512 a4fa9e05e3e3270a9a7cbca687cdede895e7d9653fe6e18c009393343931ddbb30b06a353c10595b0a5c2f20cee079f4244b6086ff29f82554ea110e24c1ffe6
- TLSH
  T1A190023410801001C037134DC0E6D750103CC71C341452F43C4730500E7032C068EC45
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution ransomware
behavioral10
- Target
  release/steam_settings.EXAMPLE/branches.EXAMPLE.json
- Size 709B
- SHA256 09c56dabdb5d4d8e65f5e7810bcd3779929417d6b3d46a85dc88d5c4b0c4a473
- MD5 c4958997bb99e2dd111ac9b6db0c0c0c
- SHA1 fb9e38e4356d5a4030b1ed6d5fd63cda40a3372b
- SHA512 ec4400987351ddc72d156f56f9c7b7473e6c0f632b2d730fa047cef058644362800ac8d39d2793d833f2d6a495d4c63d5b550eba531ecfe96c6901f02d062782
- TLSH
  T15E018475CC20AD9604D540B84C39974373B0152B080C7C4AB5C29CCC1F5EE9FAAF125B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11
- Target
  release/steam_settings.EXAMPLE/configs.app.EXAMPLE.ini
- Size 4KB
- SHA256 15d215336dac68eed66b51f81cb9779f796a169c3287140370b66613d14dcb65
- MD5 793047502c5d35c0837e274172ba384a
- SHA1 490e46c75a12bab7381b5629b0536bb22ac72461
- SHA512 ed5e05946584d53177414e14e2ead87acd9095c030ad5aff8ea4a9b04767441c5b69e9036c2e06e736582b1db1308c3c4abecff164c89820c00db5639a724e71
- SSDEEP 96:MxXy/OiQJET+RU5hZAQVH/ezMXtGCHgN7PYjQM8bKHM:MxC/ElU5hZAQVfez/7PY3NHM
- TLSH
  T17A817441B28BA330AB1341A3728EE3D76735997F5FA77D1432CE822D2B11D850552ECB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral12
- Target
  release/steam_settings.EXAMPLE/configs.main.EXAMPLE.ini
- Size 8KB
- SHA256 fd60402955312bf4764927ebb6151cf955e01320691b1eed7686bc1175fbeb53
- MD5 68f25e7946129f144afb98822903c085
- SHA1 10b2db71418cf91196a2d3d7c939aeacfce49a77
- SHA512 e4a5439a786f50c1d5776df07cbe0821661ef34e697b289cf22437ab98bb39a0cfc985e4a247db9bec70f1adf7c1e823f7f02fd69f52c04ab2d4240756ef74f6
- SSDEEP 192:Mxu5NEIqDqsrjA178i3qh1m/j6AEzTdBRPIdn:Wu5NRAjS335jKXdBRM
- TLSH
  T1130274973B057372071689629A0EE3D29739D5A92F233524E0EC815D631197E533FEEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13
- Target
  release/steam_settings.EXAMPLE/configs.overlay.EXAMPLE.ini
- Size 7KB
- SHA256 6d2830b257c3570cc77034a88e513f363e4b8859a7e064ff7680c71de77ffd65
- MD5 e9ee7519f7c73281e5c6f50de5740eec
- SHA1 dd6cc55a9d0c960129e66f8c9de432a280ef8fdf
- SHA512 8fb3516825e333e23c02371e97b0e529e22ab71d8228343b33d1d36a7054fca6ac87953893b643100dca852f3ea98e80fdda0e0c9d5d16da60d97c455b8a3a68
- SSDEEP 192:iRtU77ktWalaRwBcywl8xhQJamsBj2a4W:iR8+Wpy2tcmsBia4W
- TLSH
  T1DCE142CB390261303B5FC973769BE2C6AB338A195D233115A0DDC02D2257EB9A32F695
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral14
- Target
  release/steam_settings.EXAMPLE/configs.user.EXAMPLE.ini
- Size 1KB
- SHA256 0b9f9b54858c82d2b17c80d1541264df70d88ce5d67d3cc5c639eab01bf79af0
- MD5 0df7bf0fa5228ef5324a59fd308d239f
- SHA1 c2bb6143f349666d72552817a9b24381b3b5ca95
- SHA512 ee6ce95e866b629bd562f2e152a3095f598fbeb2d5cf4b9cddb916e0e0289ffe061e2795545da239f0f0be6e62c9f17a63ed03252e28935de5ad382a903d4fb3
- TLSH
  T16741876A3B4603342F6213F6B80ED7D58314E3DE1D77391971ED92095150EE10A217E8
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15
- Target
  release/steam_settings.EXAMPLE/controller.EXAMPLE/InGameControls.txt
- Size 339B
- SHA256 ca5a23baedd6052c43a7cab37b203e808a2606f15b7006f7675d111a28e1fcce
- MD5 d91839f4a9769454503cfdf294f0a427
- SHA1 0aa37830481f71ced14e4a362869ef4ddb17c24a
- SHA512 c0a72e66a6c72b49df1d648768da628baad25c49a0a6ca6fc2c6f74723850125b29dbc7d90e9021a3ad0c720db2bcb0062e6b062d418537631a8cc26b6de22e4
- TLSH
  T163E026F24BC21A011DFB0CFA602A9680D16580C7884704A7FBDDD44EF4E54C2808FC82
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution ransomware
behavioral16
- Target
  release/steam_settings.EXAMPLE/controller.EXAMPLE/MenuControls.txt
- Size 291B
- SHA256 93bcc5f7196c64b113ed6866f66d12e27722f0cb5a23549f56b05cfc8f810bc2
- MD5 ed8f5f1732d99f7e81d9ea38d9cfa73a
- SHA1 f360906165048e6b6b01ff2a71c4085b563988fe
- SHA512 451e7dd287ecdf5ecc95831216aafe22fdff96bcd3fe9254e659ec49c68d3c84bd57062b73d9b224fc6b3601c631a319534bb504e3d168e1bb0be968e9b7ca5e
- TLSH
  T1EFD0C288A784180064AD15EBE31E3560B990664C05A264A9C693B38F30D2426D1D7098
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution ransomware
behavioral17
- Target
  release/steam_settings.EXAMPLE/installed_app_ids.EXAMPLE.txt
- Size 462B
- SHA256 444d2869ae60aa76464d8c1fea8a29d13a241f171de7dd7d162d1acefb6a6827
- MD5 3645e67d53159353bcbfeff3e3600191
- SHA1 a68be706cb4f65232e6abb6e9bf5f5bfcf146d7c
- SHA512 a2883e33739230783672da5062fb854b3cb19c0fd3f1e2af9ebf243c25ca5e52ae290702c10ee78f41f1540a43046d47a37d49e4fd6d364440b41d302acb844a
- TLSH
  T178F0271A6FE112B379A352BB6EA6B0375344827FA23A1B30346FD660B716158443758B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution ransomware
behavioral18
- Target
  release/steam_settings.EXAMPLE/steam_appid.EXAMPLE.txt
- Size 4B
- SHA256 5db1fee4b5703808c48078a76768b155b421b210c0761cd6a5d223f4d99f1eaa
- MD5 e48e13207341b6bffb7fb1622282247b
- SHA1 77ba9cd915c8e359d9733edcfe9c61e5aca92afb
- SHA512 6f0ac65fe01188660aad900bfe16c566ebf0e56c0a7d4a15bd831049108de80bd3a2fbf1a8b91662433a40458ec208a207cab073f190bd65b889e95e4fca8e09
- MD5 SHA1 SHA512
Score

3^/10

execution ransomware
behavioral19
- Target
  release/steam_settings.EXAMPLE/steam_interfaces.EXAMPLE.txt
- Size 553B
- SHA256 81b1e8327dcdde289ab6a3615f5bbd717a2185c86f78e06f65862331fb3dd40e
- MD5 8873dabbe7a2ebd2b225ef2ae43aa104
- SHA1 1f2e459753e75b447cba63a285ebbba90b4d2b00
- SHA512 87a9b9de614561365bb47ef59d77a83ce0f3143ebe4f84501c245ec629e3ade14bd6ea3cfe5f3fc3d13062a9082a22ea0d963504a55162cb58a61810ca4aefa1
- TLSH
  T12FF0DA1F62013D794F2CF4E658E2BA22628C366B968098FDDDC2BAD14068E4453ADA01
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution ransomware
behavioral20
- Target
  release/steamclient_experimental/GameOverlayRenderer.dll
- Size 1.8MB
- SHA256 211fbc97d0be26bbc9104f94cf3db8d2d7e4f804fddfc73adc46470fba5e65eb
- MD5 f8d22683d03e8bf3a6b7a8aa26f37c66
- SHA1 5ee136d52be654c3c519407970acd6a733dcc56c
- SHA512 1354f8de780f003ece5e054a277b627b90ed2dd9a60940072ce09d0db38323581835d0e77ee6e384d1d673205647400f88e5288da98032757a550a1946b42ccd
- SSDEEP 1536:4ROAdC7+LRb8NM5L7/j87NQAgQnTbuJHA0bIsWF5cdwsYzDP15dKDVx:cOA1R8M7/CngQnTgACKowsYDP15dKDVx
- TLSH
  T1B195490036D1B136E9BED5340B74BA65EE3EBD400BA0DDEB3355D66E0E302C1E635A66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21
- Target
  release/steamclient_experimental/GameOverlayRenderer64.dll
- Size 1.9MB
- SHA256 264df433e827fa9b133f1d7e189d0852748faa76f02a6e8d5ef0cd1a3bf83cf4
- MD5 112b915e943fe11e869d6286dc2f6b19
- SHA1 cbd33667918f5f43f8daee0fde7746b2c7a0a094
- SHA512 ba22bd19ca1ad3505313a7bc2e533ae13b0f9c308fcef2c91df701fdd3c33b474aa385d384a09f792c3437745ee5b7f05247eccee10c3878f51092e535260b73
- SSDEEP 3072:bwK32ly3bxD9t0lU260Iew0dWzzqLvjW5/:b931DjHd0PZL0
- TLSH
  T18695295477E930B5E566C3788BB33A07DA7678150711AAEF0360025A2EE3FE2C179F61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral22
- Target
  release/steamclient_experimental/extra_dlls/steamclient_extra_x64.dll
- Size 301KB
- SHA256 85ec1af20c0862acb98eaa3cfe3b589f3c7c6bf323f3aa1427c3510aa2ab1c42
- MD5 003cf064298e0375ffad21b1d6cbff02
- SHA1 31bb1a486e76d14389c65bfd4f5004dcc77b4a96
- SHA512 900f9a31eb99752714bdee0f254a8c871bafb87b5fc1d592725e2b87d87a8ba7b1a6def321c9800d06415714031ceebefe9e1e1a657d40ce3fa4331257879944
- SSDEEP 6144:y5WZ8pw7uX5tQCxF4yynnws4U0Kimwp49WrWQF:dZTuXPsXnwxU06rQF
- TLSH
  T1E36406057AE5A875EA36C63C8A639D09F7B2F8950792E7CB07A109DE0E137D8CD39701
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23
- Target
  release/steamclient_experimental/extra_dlls/steamclient_extra_x86.dll
- Size 251KB
- SHA256 9d2e2e04b3d9093c0eef3e2576513e10a263bf1b3eff3204b4a4ebae8d9e63ca
- MD5 cae22ec7e2c6814922862bdb42af4046
- SHA1 d8d4843628169266dc4d911af8c5bc9dc79f6850
- SHA512 98011a3f599de68d1f420eab49c164339d32e166b074d9619bb34482c1b591ecfa8ccc26d2f72343fc8d9ac77e110663ecffbb17721faf8420e439c1be7f7598
- SSDEEP 6144:uyQhRrQrzrk/Lbrqh0xwAHTOdd8J/JJdQ:uyqhaELSQHrJ/JJdQ
- TLSH
  T1CC442941B8C1E475DEAD88304A3DBA65C939A8604BF1E5CBBB404DF94A3B1C8DF35B46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral24
- Target
  release/steamclient_experimental/steamclient.dll
- Size 18.9MB
- SHA256 e56c196a92ef365a8fdd5374ffda663320db6bbd9c23113322d46404a669e2ac
- MD5 2f10dc6d9f1c3b3575d7fcc08ea7dc07
- SHA1 bf0d99aba7bb85b24631b943ece317f096a723a4
- SHA512 9c6c366aad67b9f05cd07daaa850863077c4c17d806e7debe9b431f370c9ffa69137749e15d561beb6360758032802e73961b18bdafb6805ac2009932e64277c
- SSDEEP 393216:WBDY6TYNObEtKvKdEpcJjrkwcIgA72NE3f:W0mpxwcIgA72y
- TLSH
  T17617BE11E391C035FBB701F68BFE066E5B38AFA02B1556DB72C464494A76AD1FE32213
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral25
- Target
  release/steamclient_experimental/steamclient64.dll
- Size 21.6MB
- SHA256 4b7ee7e2013210379f6bb6db90dd3642e636c1ea7a0d17c8fe7566ce46a86b95
- MD5 9f510e3abcd720a718fb784904780a7c
- SHA1 59dca0d0233c1d9eb0768f3879b2268585af3f5b
- SHA512 8f2a9cfe2ef027b97bfa0d9a956c4ba9bc9a87efc69104973b82a11b122fd195a4fc84e12c2b6ee2b05068b524e1dadacbc8c4478a63ede3a5e6f48bc9a18035
- SSDEEP 98304:b1eGMJZfXNKmvRTFrICpQcb3qs3Q5xV32l98J0k0271y+4AxYZgAE6EZDi7QZagj:b1UVPKe982k027wciZgA72D8UQQ6BU
- TLSH
  T19D375B47E7BB01E5D6B6D03895B3623BFE717495833097DBA680560A1F62BE0E93E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral26
- Target
  release/steamclient_experimental/steamclient_loader_x64.exe
- Size 349KB
- SHA256 7005e74d4a4c7970509887b0a3c3c9d3c0737688ba981771067e0d2ee30cd314
- MD5 6f3824a59b8beff68c4a71a11bdf2dee
- SHA1 c6cc40394207e865ff39fbb285334d18af3823c2
- SHA512 0e2a298ea25b4d57736da2f70b2e16be668d80878254f5933de60244bd50da926df7363fd4f2be59db44cf201926f8670262ec4e317ef776df74b79ba63f70be
- SSDEEP 6144:p1j0X/jzEfCjtQqeKkSDFNvLsdcQtO13tO3Azczpnz1UzAIwIuKEbq:fzgtQTZSZNzkcaMdO3YVqq
- TLSH
  T14C747D26EBA410F9E277C17CCD524905EB72BC494771AACF23A04A972F276D48E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27
- Target
  release/steamclient_experimental/steamclient_loader_x86.exe
- Size 289KB
- SHA256 1f1f1fa9bf4eed7bac3b6dc365bb6fad99a87a2abab2ceb16df0c0399207e382
- MD5 2f35a8d194317e496f0f7890aaa7dc9b
- SHA1 e8beede042ffa65f6cd8e0f568cc3fc18f33188b
- SHA512 967b4de0e0080e734dda98951c5ff8c2f3d44c8c478209d4458818a549851e1b9500dd547c022476b1e892347dd61a39158dbe0627a5659841ba3b9d587546a4
- SSDEEP 6144:gVCpiy2YWq+nUW0rypX+baGFmJI0W8HEaMKKRbEGJkbrOUO11e:gVCpfi8rypX+baGFmJ/HjlHx
- TLSH
  T16F547E10B641C032DA6205725979DF76893EACA04F6455CBB3C45EFEDA342C2BB39F4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral28
- Target
  release/tools/generate_interfaces/generate_interfaces_x64.exe
- Size 294KB
- SHA256 67d1667203c83685846bbdc9c063479421a66b7f7adb8a7604238175e3a17a29
- MD5 9cbab86a9353860988edef71945797eb
- SHA1 062c6c9f9a89a260cfacde2381107f0edfc32f6c
- SHA512 82be19f085b6407e765c214c1da4c1b56dec0b047ad2f7813055b58a9b3511c70e416d18b5a00cffbe1c249b95f514f4589aa80618df38e76094d2fb539c7bb4
- SSDEEP 6144:dqUhkynTI6u/enR7o/Gr/1ObEbND0Yb69pEVmqb:jhkyE6uWnJouDlxgYO9nqb
- TLSH
  T1B2546C1AB7A814F9EE67C57CC9420506DB72B8164761EBCF03904B972F23AE49E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29
- Target
  release/tools/generate_interfaces/generate_interfaces_x86.exe
- Size 244KB
- SHA256 8343b4dd138613f5e840e1e6978a3db9d68e1dc600bb2be88f925ad2fe1ae835
- MD5 7ecae0adf4355d3d0d8c2b2ac59fdcb2
- SHA1 703d98434d728a3db65bd85e8143b9f902cb1525
- SHA512 de5db807264c301a1bdd2fad89cc060d25ee40efeaddd3adb101470ada6598edd4a0dfc5192c2f2c9f792ec5e649e1c43d60aea1b71e4c3a0240b5cbb98678be
- SSDEEP 6144:5tcaAv1qKDE3ALsKehLOUGmCaayO5D9CFw:MaM19DaKeN0THH
- TLSH
  T14F348D10B991C032D56218379879EFBA593DBD604B20A9CB73841EFDCE346D1AF39B46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral30
- Target
  release/tools/lobby_connect/lobby_connect_x64.exe
- Size 10.5MB
- SHA256 67ca6178d54d03b41ba1c4a137b35c1bafd188affa5dc04423ac1f138018f09e
- MD5 20fe980a3af37dba075a1760d0e28588
- SHA1 bd105e958c59d8efb5ac8db4a36d1d129a1242fc
- SHA512 d2dfed954963a726b55f822f7c63ace2d27d7bf75af20a7c4ccab6bb48a9569ea38b01f413ae26a218e6f3f0c3aa27d61082bc81abbff3c319ea0c0a7dfa7791
- SSDEEP 98304:dgvBh+4y7CKgzblEw3okTf+HVMMZukSCldVq:OqVMIcCA
- TLSH
  T15FB60817E7BA01E4E5B6C1789563623BFDB13495833097DB9A805A0B5B32BE4EE3D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31
- Target
  release/tools/lobby_connect/lobby_connect_x86.exe
- Size 8.5MB
- SHA256 ae149520a560508a0f4965034687fc997491e7a28f64d1bbf3b9b0f96aa494a3
- MD5 3acd62d97ab7780df2f4255464efb5cb
- SHA1 a9b6f79a6abdb1947f99e36366a6c22060d187f8
- SHA512 fd018cb7955f98630f02f2c61c74540a04719e1aa8180c663cddf8db083f7b521223d35a53c04bb9fac4b0e4d3e6bbe16d326aa854610a21c83b5a5a3eca28d3
- SSDEEP 98304:AGpdpqOlJMPYu3w30hgKYnmb7uKkkHpiXAZtW+eTIAyhjju95o4Y:AG3pqOmwogKYnmb7uKkku+AJyhjyfE
- TLSH
  T18F968D21E2518039FAF301F6CAFE097E5A7C9F602B1854DB53C4688D4A76AD1BF32653
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery execution
behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32