Overview

overview

9

Static

static

1

steam/Steam.exe

windows10-2004-x64

3

steam/Steam.exe

windows11-ltsc_2024-x64

9

steam/uninstall.exe

windows10-2004-x64

4

steam/uninstall.exe

windows11-ltsc_2024-x64

4

$PLUGINSDI...LL.dll

windows10-2004-x64

3

$PLUGINSDI...LL.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...nk.dll

windows10-2004-x64

3

$PLUGINSDI...nk.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    steam.zip
  • Size 2.2MB
  • Sample260823-1dd1ravyfs
  • SHA256 2dd3b1839d417cf3a8b50ef1988a0170b388e33492779d292e3b4b926c7518cd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
defense_evasiondiscoveryransomwarespywaretrojan

Malware Config

Targets

    • Target
      steam/Steam.exe
    • Size 4.2MB
    • SHA256 12222b0908eb69581985f7e04aa6240e928fb08aa5a3ec36acae3440633c9eb1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    defense_evasiondiscoveryspywaretrojanransomware

    • Renames multiple (6110) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Deletes itself

    behavioral1behavioral2
    • Target
      steam/uninstall.exe
    • Size 155KB
    • SHA256 72ffe8859eaa63637f5a62b7c454241db35938f8326f6ccf20352e00f8df2fe5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    4/10
    discovery
    behavioral3behavioral4
    • Target
      $PLUGINSDIR/LangDLL.dll
    • Size 16KB
    • SHA256 4fca692a36f0c99e26b5bc7ef9db5269d2c1e21288184953898130fea9b1c4fc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      $PLUGINSDIR/ShellLink.dll
    • Size 15KB
    • SHA256 eae7829a3df5d8d63e16787f7c3d5ae4b82b3b79c2cd7aad9c2532374b6ea522
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral7behavioral8
    • Target
      $PLUGINSDIR/nsExec.dll
    • Size 17KB
    • SHA256 3e2399ae5ce16dd69f7e2c71d928cf54a1024afced8155f1fd663a3e123d9226
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral10behavioral9

MITRE ATT&CK Enterprise v16

Tasks