General

  • Target
    dogshit.zip
  • Size 13.7MB
  • Sample260801-babnsathmd
  • SHA256 472ee5813c5fbbe7e1c3fa9cc14b47bd2c2c3b800d31de24537ff68a61335873
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Insecure Codesign Algorithm 1 IoCs

    File was codesigned using an insecure algorithm.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • dogshit.zip
    .zip 13.7MB
  • dogshit/2394070.lua
    236B
  • dogshit/2394071_7352388594244382936.manifest
    325KB
  • dogshit/ManifestHub2-2394070/2394070.json
    2KB
  • dogshit/ManifestHub2-2394070/2394070.lua
    193B
  • dogshit/ManifestHub2-2394070/2394071_7968616020155547253.manifest
    538KB
  • dogshit/ManifestHub2-2394070/key.vdf
    129B
  • dogshit/New Text Document.txt
    21B
  • dogshit/SteamSetup.exe
    .exe 2.3MB
  • $PLUGINSDIR/StdUtils.dll
    .dll 110KB
  • $PLUGINSDIR/System.dll
    .dll 22KB
  • $PLUGINSDIR/modern-header.bmp
    25KB
  • $PLUGINSDIR/modern-wizard.bmp
    150KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 20KB
  • $PLUGINSDIR/nsExec.dll
    .dll 17KB
  • $PLUGINSDIR/nsProcess.dll
    .dll 15KB
  • Steam.exe
    .exe 4.2MB
  • bin/SteamService.exe
    .exe 2.5MB
  • public/steambootstrapper_brazilian.txt
    4KB
  • public/steambootstrapper_bulgarian.txt
    6KB
  • public/steambootstrapper_czech.txt
    4KB
  • public/steambootstrapper_danish.txt
    4KB
  • public/steambootstrapper_dutch.txt
    4KB
  • public/steambootstrapper_english.txt
    4KB
  • public/steambootstrapper_finnish.txt
    4KB
  • public/steambootstrapper_french.txt
    4KB
  • public/steambootstrapper_german.txt
    4KB
  • public/steambootstrapper_greek.txt
    6KB
  • public/steambootstrapper_hungarian.txt
    4KB
  • public/steambootstrapper_indonesian.txt
    4KB
  • public/steambootstrapper_italian.txt
    4KB
  • public/steambootstrapper_japanese.txt
    5KB
  • public/steambootstrapper_korean.txt
    4KB
  • public/steambootstrapper_koreana.txt
    4KB
  • public/steambootstrapper_latam.txt
    4KB
  • public/steambootstrapper_norwegian.txt
    4KB
  • public/steambootstrapper_polish.txt
    4KB
  • public/steambootstrapper_portuguese.txt
    4KB
  • public/steambootstrapper_romanian.txt
    4KB
  • public/steambootstrapper_russian.txt
    6KB
  • public/steambootstrapper_schinese.txt
    4KB
  • public/steambootstrapper_spanish.txt
    4KB
  • public/steambootstrapper_swedish.txt
    4KB
  • public/steambootstrapper_tchinese.txt
    4KB
  • public/steambootstrapper_thai.txt
    7KB
  • public/steambootstrapper_turkish.txt
    4KB
  • public/steambootstrapper_ukrainian.txt
    6KB
  • public/steambootstrapper_vietnamese.txt
    4KB
  • uninstall.exe
    .exe 155KB
  • $PLUGINSDIR/LangDLL.dll
    .dll 16KB
  • $PLUGINSDIR/ShellLink.dll
    .dll 15KB
  • $PLUGINSDIR/modern-header.bmp
    25KB
  • $PLUGINSDIR/nsExec.dll
    .dll 17KB
  • dogshit/st-setup-1.8.30.exe
    .exe 10.6MB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/modern-header.bmp
    25KB
  • $PLUGINSDIR/modern-wizard.bmp
    150KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 10KB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • Core.dll
    .dll 657KB
  • Qt5Core.dll
    .dll 5.7MB
  • Qt5Gui.dll
    .dll 6.7MB
  • Qt5Network.dll
    .dll 1.3MB
  • Qt5Svg.dll
    .dll 322KB
  • Qt5Widgets.dll
    .dll 5.2MB
  • SteamTools.exe
    .exe 1.7MB
  • imageformats/qico.dll
    .dll 37KB
  • msvcp140.dll
    .dll 612KB
  • msvcp140_1.dll
    .dll 30KB
  • platforms/qwindows.dll
    .dll 1.4MB
  • vcruntime140.dll
    .dll 83KB
  • vcruntime140_1.dll
    .dll 43KB

dogshit.zip

  • SHA256 472ee5813c5fbbe7e1c3fa9cc14b47bd2c2c3b800d31de24537ff68a61335873
  • MD5 SHA1 SHA512 SSDEEP TLSH