9cb7595ff66759dd286026c9fb3d4092b5cfd5cec9f6a2fd7429a16b07fe83fb

General

Target
Steam Tools Fixer New Update.rar
Size 17.8MB
Sample260806-nz99vszerf
SHA256 9cb7595ff66759dd286026c9fb3d4092b5cfd5cec9f6a2fd7429a16b07fe83fb
MD5 2e7a973e527f17b1e3f8133b39579c05
SHA1 c151b24170da773223e23dec8bcb19f5f15115c2
SHA512 9b4c7164d5deb9d6cfa1aa8de9979d24772d375592150b65351a232fa09659f6becb304b8d436c38eed445b1c83c29419ec5172fc9251718507c1610691d86ba
SSDEEP 393216:4qB/aUA7BMoYQp1BJyZFsm33Rg13O4sxXL04sF/ZkVT/1IXeFML4:4qBy5BMoZpUFsmHdsFBiZUeA4
TLSH
T1A01733DDF111A08E5C9D06F39A3B44D9A256B34CF8A14F7B138DA40D7D3B8A32D6A079
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Steam Tools Fixer New Update.rar
- Size 17.8MB
- SHA256 9cb7595ff66759dd286026c9fb3d4092b5cfd5cec9f6a2fd7429a16b07fe83fb
- MD5 2e7a973e527f17b1e3f8133b39579c05
- SHA1 c151b24170da773223e23dec8bcb19f5f15115c2
- SHA512 9b4c7164d5deb9d6cfa1aa8de9979d24772d375592150b65351a232fa09659f6becb304b8d436c38eed445b1c83c29419ec5172fc9251718507c1610691d86ba
- SSDEEP 393216:4qB/aUA7BMoYQp1BJyZFsm33Rg13O4sxXL04sF/ZkVT/1IXeFML4:4qBy5BMoZpUFsmHdsFBiZUeA4
- TLSH
  T1A01733DDF111A08E5C9D06F39A3B44D9A256B34CF8A14F7B138DA40D7D3B8A32D6A079
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery execution ransomware spyware
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- System Binary Proxy Execution: wuauclt
  Abuse Wuauclt to proxy execution of malicious code.
  defense_evasion
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral1 behavioral2
- Target
  Steam Tools Fixer New Update/Readme.txt
- Size 663B
- SHA256 3ca39bc88b610e1cc76a05a9e832ca187eebe400ed468801bc717285359c4294
- MD5 49bb43ee46e090a72f9193ccfc22484f
- SHA1 1aa846ecc51262cf0c3baecfe4fe57c0d424d665
- SHA512 7c6beb80cac740c6c59a7663f3706b97c886835dae78d10d3560d50318a709193cb86200e4419764989053eb1882ad52675c999ed237037dec3791a58306ac8a
- TLSH
  T18A01D36F7FE3525017B453E42F8A58D5E200146D7778435DBE2653043D391A05C11FDE
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Steam Tools Fixer New Update/Steam Tools Fixer.rar
- Size 17.8MB
- SHA256 8be637de0bac4df578ca4d4eef14f4fc12e14e6b369253be0d08ef5a030efa41
- MD5 72c06427ec53de3021404701180f1db9
- SHA1 e12ea713bfb7e2e47687d34527d062342839d761
- SHA512 5a0cd1b87946ac5bf880307a2425db77491663d9d9166af1ce1b7f9abe37368953daadd558e250698e230ba142f96ef3572495332be9f641a8edd7a2f3f61621
- SSDEEP 393216:6qB/aUA7BMoYQp1BJyZFsm33Rg13O4sxXL04sF/ZkVT/1IXeFMLr:6qBy5BMoZpUFsmHdsFBiZUeAr
- TLSH
  T1351733DDF111A08E5C9D06B39A3B44D9A256B34CF8A14F7B138DA40D7D3B8A33D6A079
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6