Overview
overview
3Static
static
3MSVCR71.dll
windows10-2004-x64
3MSVCR71.dll
windows11-ltsc_2024-x64
3emulator.exe
windows10-2004-x64
3emulator.exe
windows11-ltsc_2024-x64
3files/SteamUI_273.pkg
macos-10.15-amd64
files/Steam_21.pkg
macos-10.15-amd64
files/firstblob.py
windows10-2004-x64
3files/firstblob.py
windows11-ltsc_2024-x64
3files/secondblob.py
windows10-2004-x64
3files/secondblob.py
windows11-ltsc_2024-x64
3files/user...est.py
windows10-2004-x64
3files/user...est.py
windows11-ltsc_2024-x64
3fixed_exe/Steam.exe
windows10-2004-x64
3fixed_exe/Steam.exe
windows11-ltsc_2024-x64
3python24.dll
windows10-2004-x64
3python24.dll
windows11-ltsc_2024-x64
3source/Ste...est.py
windows10-2004-x64
3source/Ste...est.py
windows11-ltsc_2024-x64
3source/emulator.py
windows10-2004-x64
3source/emulator.py
windows11-ltsc_2024-x64
3source/setup.py
windows10-2004-x64
3source/setup.py
windows11-ltsc_2024-x64
3source/steam.py
windows10-2004-x64
3source/steam.py
windows11-ltsc_2024-x64
3source/ste...ver.py
windows10-2004-x64
3source/ste...ver.py
windows11-ltsc_2024-x64
3source/ste...fig.py
windows10-2004-x64
3source/ste...fig.py
windows11-ltsc_2024-x64
3source/ste...ver.py
windows10-2004-x64
3source/ste...ver.py
windows11-ltsc_2024-x64
3source/ste...ver.py
windows10-2004-x64
3source/ste...ver.py
windows11-ltsc_2024-x64
3Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
23/08/2026, 03:47
Static task
static1
Behavioral task
behavioral1
Sample
MSVCR71.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
MSVCR71.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
emulator.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
emulator.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
files/SteamUI_273.pkg
Resource
macos-20250619-en
Behavioral task
behavioral6
Sample
files/Steam_21.pkg
Resource
macos-20250619-en
Behavioral task
behavioral7
Sample
files/firstblob.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
files/firstblob.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
files/secondblob.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
files/secondblob.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
files/users/steamtest.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
files/users/steamtest.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
fixed_exe/Steam.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
fixed_exe/Steam.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
python24.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
python24.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
source/Steam2/manifest.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
source/Steam2/manifest.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
source/emulator.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
source/emulator.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
source/setup.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
source/setup.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
source/steam.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
source/steam.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
source/steamemu/authserver.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
source/steamemu/authserver.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
source/steamemu/config.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
source/steamemu/config.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
source/steamemu/configserver.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
source/steamemu/configserver.py
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral31
Sample
source/steamemu/contentlistserver.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
source/steamemu/contentlistserver.py
Resource
win11ltsc2024-20260710-en
General
- Target emulator.exe
- Size 17KB
- Sample260823-ecafaaxtey
- SHA256 5f010c9cecd1fce7a780867b2d72afd219317c873626810618812534f76f49e1
- MD5 84e989e173e85879e526fb6684aa537a
- SHA1 cf3c1d22322b4988342ccb0ad0f7053e76310d93
- SHA512 7bedf34d7aa161496f2bd02b1520e4893378827038d09387f1a98651a6ea2a1fc89bbc41841dc8173dece72d1685e3f0ff295a21b8505dbd35ae16adb82fd34f
- SSDEEP 384:77eu6gkCClf/1SWJ+IXLBVFBVXTbSsrL2RjPWehd6T5hDda4H/2:77eu6ECJ1SqBVFBVXHSJhWehdAnDdfu
- TLSH T13C72F9866FD09C6BE3A4453542E9466F8B33F3B3A31199D3CA2C697619942C4CD7C3CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language emulator.exe