General
- Target Valve.exe
- Size 18.8MB
- Sample260731-3ada6aam9s
- SHA256 4d3b7f6f1db263f26a78b08e968479719a1220d92422e8dae8c444331f404391
- MD5 2b7c9d27be1cbc32d9c991bb09c4eef6
- SHA1 4062bd2ac3d83135db468f17a852a78bb83eed0b
- SHA512 fbc1f42310d04b6c9c690914af037d0caf853eaecd2033d87393bf329d3cccdffa28e63ff7bc3feb3c9186281c7daf134ae635eebf11b7b598d51e8d4c6e49a9
- SSDEEP 393216:ulNIZ37UJ32eivEoxy8ejhPK1F9qHVXEAphVtpIwQSg+nFoIykz4zOdvFgV1Z:ubS4ce2s7l4vqHVRphFBo+FoIyg4zkva
- TLSH T1E917339937594DBAF8FA073DA9C86B56D3B378551BA0D2A70BB00C210E672D8DF34B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Valve.exe
Resource
win10ltsc2021-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target Valve.exe
- Size 18.8MB
- SHA256 4d3b7f6f1db263f26a78b08e968479719a1220d92422e8dae8c444331f404391
- MD5 2b7c9d27be1cbc32d9c991bb09c4eef6
- SHA1 4062bd2ac3d83135db468f17a852a78bb83eed0b
- SHA512 fbc1f42310d04b6c9c690914af037d0caf853eaecd2033d87393bf329d3cccdffa28e63ff7bc3feb3c9186281c7daf134ae635eebf11b7b598d51e8d4c6e49a9
- SSDEEP 393216:ulNIZ37UJ32eivEoxy8ejhPK1F9qHVXEAphVtpIwQSg+nFoIykz4zOdvFgV1Z:ubS4ce2s7l4vqHVRphFBo+FoIyg4zkva
- TLSH T1E917339937594DBAF8FA073DA9C86B56D3B378551BA0D2A70BB00C210E672D8DF34B50
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.