Analysis
- geolocation tags
nanew-jerseynorth-americaunited-statesususa - max time kernel
898s - max time network
476s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-es - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-eslocale:es-esos:windows11-ltsc_2024-x64systemwindows - submitted
09/08/2026, 16:54
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
steam-account-manager.exe
Resource
win10v2004-20260513-es
30 signatures
900 seconds
Behavioral task
behavioral2
Sample
steam-account-manager.exe
Resource
win11ltsc2024-20260709-es
3 signatures
900 seconds
General
- Target steam-account-manager.exe
- Size 6.3MB
- Sample260809-ver14sbe27
- SHA256 acc101992d51981df94c53a99d5913689b21cfba2786a553c7958d65aaca9d15
- MD5 278c3e93d9a7c1d36963c5d0e2696f3e
- SHA1 8ba2fd328e025fea19f53403c77a3a11ed70c86d
- SHA512 ae24f7212fc67e75e2d696ff393787ec7a34030d6492a3c40efe31d8c912d7d3773418da76f00720515907833b8ca322aa05e84d0f332cbbbe8addb6a30c26f0
- SSDEEP 98304:+Dei7DUm9nHmTjKHnZaX1771D/zs+Y7uMli9cSU5rj:MeC99nHmTjKHnZaX1771TzhYyHKh
- TLSH T1D5668D26A6A401ECD0BBE179CE4AD903EB72B80507719BDF06A046665F776E05F3F312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4716 steam-account-manager.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4716 steam-account-manager.exe - Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Users\Admin\AppData\Local\Temp\steam-account-manager.exe"C:\Users\Admin\AppData\Local\Temp\steam-account-manager.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4716
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:4996
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:3560