Analysis
- max time kernel
150s - max time network
142s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
31/07/2026, 00:15
Behavioral task
behavioral1
Sample
Steam Hack v16/Steam Hack v16.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Steam Hack v16/Steam Hack v16.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
Steam Hack v16/Steam Hack v16.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
Steam Hack v16/Steam Hack v16.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
Steam Hack v16/msvcr71.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
Steam Hack v16/msvcr71.dll
Resource
win11ltsc2024-20260709-en
General
- Target Steam Hack v16/Steam Hack v16.exe
- Size 5KB
- Sample260731-akeyhszdpc
- SHA256 f3621856ef4d534f3b6363da1d36a4225ef059ea8621b4d38b2d2aee39a98c41
- MD5 f02488b2f487ba67a91cc7b766d00001
- SHA1 620c522267dafd7e357940b7b12fc237988c0a25
- SHA512 3a9ad319dff52359949b6cc85664986f22e35f2a18eeb903518cc331780c42682411c975d0111d386eae8478fe3c228102fe55a5eb0fa5ab7252537a6aff2960
- SSDEEP 96:rpD6ILOQhuiv6ZXfAoXOtCrZQ9uARO+UtDmVthcX:rlL7hVgXfAlCrZQ9uSOjtAC
- TLSH T16AC12947F2DDAB3EC7568073AB8BD012129FA66807EE53482CF8E55BA95B07903150A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule behavioral4/memory/3912-0-0x0000000000400000-0x0000000000408000-memory.dmp upx behavioral4/memory/3912-2-0x0000000000400000-0x0000000000408000-memory.dmp upx behavioral4/memory/3912-7-0x0000000000400000-0x0000000000408000-memory.dmp upx behavioral4/memory/3912-8-0x0000000000400000-0x0000000000408000-memory.dmp upx behavioral4/memory/3912-14-0x0000000000400000-0x0000000000408000-memory.dmp upx behavioral4/memory/3912-15-0x0000000000400000-0x0000000000408000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Steam Hack v16.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe 3912 Steam Hack v16.exe