e497659d35ed37b241a64ecea1865fd77d63fb240ff3cbc965f9702cc46e1f2e

Sharing

Copy URL Twitter E-mail

General

Target
Steam_Account_Generator-win.exe
Size 42.6MB
Sample260809-yq6v7acc48
SHA256 e497659d35ed37b241a64ecea1865fd77d63fb240ff3cbc965f9702cc46e1f2e
MD5 257452529dc1c6da9c86e25fe74043fd
SHA1 36f31253512703eba2f8d59c3802ed3b4c51a327
SHA512 b4c7c25a8cc1903c2333ecccfa35916572981214335637401b66524a6189d661b8c113b38ca2c719389aaa76558aa7a4c4bd95345be04352c199e6f03676075c
SSDEEP 786432:RlRfomIPqZq00+g+vH4fPhfPVrH/yIMtSDpXRYIjMWG/9lKNMN5fFDjlj4GkE+gi:Rjfo2wpdH/Rz/5uwMr4Z8oI397+
TLSH
T174A733829D445FEEF0563F7FCB2B46B0AE663B146086766F102C24A9DC43B7E5362532
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Steam_Account_Generator-win.exe
- Size 42.6MB
- SHA256 e497659d35ed37b241a64ecea1865fd77d63fb240ff3cbc965f9702cc46e1f2e
- MD5 257452529dc1c6da9c86e25fe74043fd
- SHA1 36f31253512703eba2f8d59c3802ed3b4c51a327
- SHA512 b4c7c25a8cc1903c2333ecccfa35916572981214335637401b66524a6189d661b8c113b38ca2c719389aaa76558aa7a4c4bd95345be04352c199e6f03676075c
- SSDEEP 786432:RlRfomIPqZq00+g+vH4fPhfPVrH/yIMtSDpXRYIjMWG/9lKNMN5fFDjlj4GkE+gi:Rjfo2wpdH/Rz/5uwMr4Z8oI397+
- TLSH
  T174A733829D445FEEF0563F7FCB2B46B0AE663B146086766F102C24A9DC43B7E5362532
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/SpiderBanner.dll
- Size 9KB
- SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
- MD5 17309e33b596ba3a5693b4d3e85cf8d7
- SHA1 7d361836cf53df42021c7f2b148aec9458818c01
- SHA512 1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
- SSDEEP 192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
- TLSH
  T1FF12D6861F9044F7E510607CA896B7EF93177B2AA382ADCBCE73849429115E32F79347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/StdUtils.dll
- Size 101KB
- SHA256 72d38ef115e71fc73dc5978987c583fc8c6b50ff12e4a5d30649a4d164a8b6ae
- MD5 33b4e69e7835e18b9437623367dd1787
- SHA1 53afa03edaf931abdc2d828e5a2c89ad573d926c
- SHA512 ca890e785d1a0a7e0b4a748416fba417826ae66b46e600f407d4e795b444612a8b830f579f2cf5b6e051bea800604f34f8801cc3daf05c8d29ad05bcda454a77
- SSDEEP 1536:Ayy+wx2YAlWrU5OX9crt5c4DBqiC7hk333kbQk:ry+wojIwgNcr1a7WH0b
- TLSH
  T189A31A527174349EE1F5077C176E2373847E1B38AB28A8DB03A249CEC3761E1A0F5B5A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  $PLUGINSDIR/System.dll
- Size 11KB
- SHA256 a632d74332b3f08f834c732a103dafeb09a540823a2217ca7f49159755e8f1d7
- MD5 75ed96254fbf894e42058062b4b4f0d1
- SHA1 996503f1383b49021eb3427bc28d13b5bbd11977
- SHA512 58174896db81d481947b8745dafe3a02c150f3938bb4543256e8cce1145154e016d481df9fe68dac6d48407c62cbe20753320ebd5fe5e84806d07ce78e0eb0c4
- SSDEEP 192:X24sihno0bW+l97H4GB7QDs91kMtwtobTr4u+QHbazMNHT7dmNIEr:m8vJl97JeoxtN/r3z7YV
- TLSH
  T1E0327D1293E044F2F191853C086B3B5AAB7A65099BE24EA79FE381817D15AD6BD3D303
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  $PLUGINSDIR/WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH
  T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  resources/electron.asar
- Size 289KB
- SHA256 de4852210b3b0a8b187b4c31de9c3c3c488b6fb9c336623c231e413fb93743e3
- MD5 71520beea2780f5c2badac3644b49f11
- SHA1 582fb03f783297f0837499b50a4652cc0f7ceba2
- SHA512 f4e2630b175225932e31e9045584ea0a017fbbd2016af202b54be3782f83c72884e1c1833c442954a90527e3188baeac4ba1b82a6a656bf00f5f41289474bb69
- SSDEEP 6144:0WnuFWi5WvZbMWzn+gUT+W+w3nlXhFcJopvisj/d543GR:W+MFcJoBn43a
- TLSH
  T1E154C55525FA22250747B0FA994B6107B6398013301D9AA0B9DC87E4BFC5678C2FAFED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  resources/elevate.exe
- Size 105KB
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- MD5 792b92c8ad13c46f27c7ced0810694df
- SHA1 d8d449b92de20a57df722df46435ba4553ecc802
- SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
- TLSH
  T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  resources/inspector/Images/accelerometer-back.svg
- Size 1KB
- SHA256 5dec5ff61f0266a0073c3e915bfe169d7eff80811ef09b6a80e0e824434cdda6
- MD5 342973eb940ef43b409b28c2c6b0d520
- SHA1 3457207bd009c1b5cbe64cf1f8ad5e2c45fb1580
- SHA512 8541c643e05ec6c8bba40bca0f5a03f1fd48aedbe3224edc70a10c307d9142cf5b3b1a4b4ea2f104487decea1f7234059a03ce49673fdd8fab3ec80815aeb5f2
- TLSH
  T1C9414548D1FE44D1901E8310EFE075440A03B0C31F4A0C49BEDC85B6AF024D556AB7DF
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral15 behavioral16
- Target
  resources/inspector/Images/accelerometer-front.svg
- Size 1KB
- SHA256 bc7688afd98ad321b33b5cb4286e9fe8647634cb413f6f931169450f0ffcd39f
- MD5 536ad784f667f32b2f3a94b6cce9e217
- SHA1 210c31d9772296ef869fc50de693790ca54d334e
- SHA512 be34e83d2d4512da7a0819301f42d879e73a71fac184180e0e52c5d1cc8493d2f2f45c7e2797681e1c35482e2ac461f78468953e4eefb6b0426e32c24130892b
- TLSH
  T1B131439CD2ED4034CD304728F7EDE8E5A23F60CA07A80C45B484347BEE244D569BB299
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral17 behavioral18
- Target
  resources/inspector/Images/audits_logo.svg
- Size 9KB
- SHA256 fc9f80fe55f57574ce7936797f9198fa41217c17e53391c2628d8dd9e5c54d4a
- MD5 3a4893bd2ef5bb233e924f15e51af69a
- SHA1 e8d5e9f524c4d8f7ebaed16693ea5f4c7fdfbc7a
- SHA512 6537811b1c2290bfcdccb9f3659d6bd56daa614a8d8e1e48ef3b3e53b538efe04543218e36940558937bdfb7d31238f3fff17da0a02d406d6e649c7e0b25485e
- SSDEEP 192:VkA5WTW2H5nP5A2RY+AY8AS7YYMSh2Ibmh0gVXvmhze4ytK88sI3wrwAMSLExq78:mK/2H5nPu2648TBcLvmhze4r88sI3wrG
- TLSH
  T1BC225611E63C58E9C01E4199AEE32B09722AB59793580C1CFDECC435AF429A2679F3D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral19 behavioral20
- Target
  resources/inspector/Images/ic_info_black_18dp.svg
- Size 270B
- SHA256 0fd53290b1ca149094972af46ee4930d017cc2bd9e2f290750b34c7418b9ccaf
- MD5 b6c295ae5994273d9230c78fc16d3ba4
- SHA1 1eaed5d10e00e3df453f9152bcbcf35d68ecd841
- SHA512 4f361991b278f4295ea7c930cd2f2a4c047caf78e3b86cc8f9cf03e361e7bd25d0e7e1a85dd573a0ecb7e8f3c0b7eca3620892ec977c9f574a2744f6bc68ec20
- TLSH
  T1D7D02BA951FD080CD80857A03A2CB0F10476B8E593400361EC541B041B094ED9CA79E9
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral21 behavioral22
- Target
  resources/inspector/Images/ic_warning_black_18dp.svg
- Size 218B
- SHA256 57ef31a0c33e8b8a45c588bbdad0e10e4cc4ba552e672cd38891ea2af3b7d70b
- MD5 c05e834303596363f85c762bfdede5b8
- SHA1 fa9b793cb9d12ea161d6bc69abfcf3b655f531e6
- SHA512 a0bb95f729e9677879bf732153d78570f179676b6e2c41b80e70b33d9bc321856cce8fea1b39302f8639005ff98e8138d247fd9ddd888d5695386a085cc8b4ea
- TLSH
  T1F4D02379E1DC4C4C94085670757DF06114B7F0D151C04545D8D0184CB7054E16EE7EE8
- MD5 SHA1 SHA512 TLSH
Score

4^/10

adware discovery spyware
behavioral23 behavioral24
- Target
  resources/inspector/InspectorBackendCommands.js
- Size 106KB
- SHA256 42a68806ee9073a44b585dfacaebc7e8f7cbf3825338fb5129044337a8825a6a
- MD5 29f9d1a4631cd48413179b19e54cb148
- SHA1 0c40dc7f5e9fbabb92ad817e9411c26e1c178e9b
- SHA512 397a0d95da028ea694db13ff7d161ec2a99f32eff258986dc56f89c6071ca0647902864904688023c5bc97a460f3f0627a59bf5f4e45fd29f0c2aea54455919f
- SSDEEP 768:enpCLSdzp4kdTqoWua0r06czTuykraix3xKxJ3kS+a/R7UeSdGYS0SdScG5hgSh0:73TmXpcr
- TLSH
  T1CBB3814A400F50FF49EA58D87AC04A59E47DC7FFCA54182DB66D79E85CEE800AF02E5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  resources/inspector/SupportedCSSProperties.js
- Size 22KB
- SHA256 43060391fce88ada7a5641514322c7d094d47f362b80362ad1478663cac4afe3
- MD5 1d582feb9b0c5fd6ba433853932241a9
- SHA1 487b86bfb47aa27fda0158a2491c2402b17cd626
- SHA512 995de9e4e988fc1ea895a9ca1f5fa391b8e3bad2f6ea5bdb857032da3c0e34456a90cdf6da5f8fbd7b49e2f0da557c6e7990aaf81bcf50de4aab54830a34ea57
- SSDEEP 384:roQrHD6AST1PducHUgyOdqkybvSv1Z7O3NnnVEXlL1oUtVayFj5x6y3RU28W8Li6:roQH6ASTZducHUgyOdqkybvSv1ZKNnnZ
- TLSH
  T1DFA289F2692205F700EFCCD5235D2A4379246B73E34D9CAAA14B4D56A6CDE28DB40F36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  resources/inspector/Tests.js
- Size 51KB
- SHA256 da5231b3f179a15f84313121998f0696091d7844d1dfbb2b0de79f5d25050faf
- MD5 ca788875b2ee517723e590070cd4b69c
- SHA1 b57bc3d61348fa772869cd425c1bead066f233df
- SHA512 af5b749d484a240a83bd94cdf3439c5ead04ef245e57478d7540a4236305f31149c182e3e02ba1bf5fcbc0c715b9d33d7ac3dfa991c5fae8cdc6748a847d3fe8
- SSDEEP 768:E3JPT/LhydGPqHZfvvLxU5Ra0qI33Ncu0lxA0AkAT0VBMKy2kY:iJrkdGSHZXjxU5E0qIHNcBlxA0AkAU
- TLSH
  T18433704E6AF71160843370BE7F1F25246232C45F3801D8A6BDAD87842FEA2354797EAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  resources/inspector/accessibility/ARIAProperties.js
- Size 16KB
- SHA256 3df6c5c6ec6c06e5ec148f62596c64d91cd79ec19662f50bc2d996eabe6ef4f4
- MD5 73f3825fdd55a69ace4663ebb36b38b5
- SHA1 f9813f28c7f949b586bec68b8fdbdba1b95319d3
- SHA512 ce02ea0116f852fa63d4ec31861e71ff8773401419b4f4b302966f2604ee877a7826394549e6a1f496327c0da714bd565cae4092e12c33a50c7f9a7d808d1336
- SSDEEP 192:FprZXHApfTFr7ulr9jakLQCzbRPJRU4cR8mer4O4GI0jPP2AliMo/n34hFxeiZIY:oUlpjtZzPJ8R6DP2Al6v1i6221HlsN
- TLSH
  T14A72CFF6AA2205779FF331C165D112437E18D6D1C6EC2E1A099D8B6573EFC20B6DA234
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32