8465984b01b42a75f5faea8f2d884bbd6085a695c40c2b90eb0385f0a5081266 | Triage™

Login
Reports

Overview

overview

3

Static

static

3

Goldberg_L...f0.zip

windows10-2004-x64

1

Goldberg_L...f0.zip

windows11-ltsc_2024-x64

1

experiment...pi.dll

windows10-2004-x64

3

experiment...pi.dll

windows11-ltsc_2024-x64

3

experiment...64.dll

windows10-2004-x64

1

experiment...64.dll

windows11-ltsc_2024-x64

1

experiment...nt.dll

windows10-2004-x64

3

experiment...nt.dll

windows11-ltsc_2024-x64

3

experiment...64.dll

windows10-2004-x64

1

experiment...64.dll

windows11-ltsc_2024-x64

1

experiment...nt.dll

windows10-2004-x64

3

experiment...nt.dll

windows11-ltsc_2024-x64

3

experiment...64.dll

windows10-2004-x64

1

experiment...64.dll

windows11-ltsc_2024-x64

1

experiment...er.exe

windows10-2004-x64

3

experiment...er.exe

windows11-ltsc_2024-x64

3

job_id

windows10-2004-x64

3

job_id

windows11-ltsc_2024-x64

3

lobby_conn...me.txt

windows10-2004-x64

1

lobby_conn...me.txt

windows11-ltsc_2024-x64

1

source_cod...me.txt

windows10-2004-x64

1

source_cod...me.txt

windows11-ltsc_2024-x64

1

source_cod...bundle

windows10-2004-x64

3

source_cod...bundle

windows11-ltsc_2024-x64

3

steam_appi...ME.txt

windows10-2004-x64

1

steam_appi...ME.txt

windows11-ltsc_2024-x64

1

steam_inte...LE.txt

windows10-2004-x64

1

steam_inte...LE.txt

windows11-ltsc_2024-x64

1

steam_sett...LE.txt

windows10-2004-x64

1

steam_sett...LE.txt

windows11-ltsc_2024-x64

1

steam_sett...E.json

windows10-2004-x64

3

steam_sett...E.json

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Goldberg_Lan_Steam_Emu_master--475342f0.zip
Size 18.5MB
Sample260827-nld99ssxct
SHA256 8465984b01b42a75f5faea8f2d884bbd6085a695c40c2b90eb0385f0a5081266
MD5 27beb58209a060789229eb2b849dded2
SHA1 051dc1f491ff11a56ceb17f556191083cd517789
SHA512 7eb58728689a652189cb2af5c5c4fee2d11fe95bdfc3c0ad96851584bc75820b24f99954425be9f19934f4f3d964093f7eb67b27f89eea199624a64f93d62341
SSDEEP 393216:CBH3JSILRhVLQVBbS7brMH35TUXfxmAN9eHuCKBhcWkvxuiXb3uTKSbx:w/LtLQYrMHpgmuewkpJ3uPd
TLSH
T1721733F0DB438938D9C09ABE851B8DF96B9B85D3CF168E4BD9CD7101721785E2227287
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery execution ransomware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

Goldberg_Lan_Steam_Emu_master--475342f0.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

Goldberg_Lan_Steam_Emu_master--475342f0.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

experimental/steam_api.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral4

Sample

experimental/steam_api.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral5

Sample

experimental/steam_api64.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

experimental/steam_api64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

experimental/steamclient.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

3 signatures

150 seconds

Behavioral task

behavioral8

Sample

experimental/steamclient.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

3 signatures

150 seconds

Behavioral task

behavioral9

Sample

experimental/steamclient64.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral10

Sample

experimental/steamclient64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

experimental_steamclient/steamclient.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

2 signatures

150 seconds

Behavioral task

behavioral12

Sample

experimental_steamclient/steamclient.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

2 signatures

150 seconds

Behavioral task

behavioral13

Sample

experimental_steamclient/steamclient64.dll

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

experimental_steamclient/steamclient64.dll

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

experimental_steamclient/steamclient_loader.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral16

Sample

experimental_steamclient/steamclient_loader.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral17

Sample

job_id

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral18

Sample

job_id

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral19

Sample

lobby_connect/Readme.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral20

Sample

lobby_connect/Readme.txt

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral21

Sample

source_code/Readme.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral22

Sample

source_code/Readme.txt

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral23

Sample

source_code/source_code.bundle

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

source_code/source_code.bundle

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

steam_appid.EDIT_AND_RENAME.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral26

Sample

steam_appid.EDIT_AND_RENAME.txt

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral27

Sample

steam_interfaces.EXAMPLE.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral28

Sample

steam_interfaces.EXAMPLE.txt

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral29

Sample

steam_settings.EXAMPLE/DLC.EXAMPLE.txt

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

150 seconds

Behavioral task

behavioral30

Sample

steam_settings.EXAMPLE/DLC.EXAMPLE.txt

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

1 signatures

150 seconds

Behavioral task

behavioral31

Sample

steam_settings.EXAMPLE/achievements_EXAMPLE.json

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral32

Sample

steam_settings.EXAMPLE/achievements_EXAMPLE.json

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  Goldberg_Lan_Steam_Emu_master--475342f0.zip
- Size 18.5MB
- SHA256 8465984b01b42a75f5faea8f2d884bbd6085a695c40c2b90eb0385f0a5081266
- MD5 27beb58209a060789229eb2b849dded2
- SHA1 051dc1f491ff11a56ceb17f556191083cd517789
- SHA512 7eb58728689a652189cb2af5c5c4fee2d11fe95bdfc3c0ad96851584bc75820b24f99954425be9f19934f4f3d964093f7eb67b27f89eea199624a64f93d62341
- SSDEEP 393216:CBH3JSILRhVLQVBbS7brMH35TUXfxmAN9eHuCKBhcWkvxuiXb3uTKSbx:w/LtLQYrMHpgmuewkpJ3uPd
- TLSH
  T1721733F0DB438938D9C09ABE851B8DF96B9B85D3CF168E4BD9CD7101721785E2227287
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  experimental/steam_api.dll
- Size 2.4MB
- SHA256 33585536081b1e6f4bc1e5cc91f16d5513822cb0510546446c2e9be35d08b74f
- MD5 d6e749904e8116946c3734f496602bb1
- SHA1 378e313efbdbbf373454769182c24b3c6303e3bb
- SHA512 5fd53c96b89eadaff44bc0fb6291321bca4afcbe953d2ff020262c290f6adbff3b3e6490cb88cb98d33f2abb92541e96ef0fa5f963019ca0fef8687a2da5b071
- SSDEEP 49152:UHzA27ef7zmnyUVyf0xqTT5/iyjPbMu2AI1NrFzBMipzW3CoukffC0vHVou16eD+:U827XnPYcxqXZiyjPb92AIjRBM1dvVo
- TLSH
  T1C0C58E21BA96C0B1D68F13757439AB2F443C6A514B290DE7E3D4296BBEE90C21B3714F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  experimental/steam_api64.dll
- Size 3.1MB
- SHA256 286f2ed575fb16bba9c451bdf5c8738b5aa6587ec7831830cfae1739c6347edd
- MD5 77f259bc5affc9d59958d2e35d946830
- SHA1 d501e2b3ca6970dd1ab771a6dc6f2ae67dcff996
- SHA512 7915f3fb4c4aa0728339fac274e104579e67b1af98a665124d5b1695d8d732ee0a114a7c2883ea5f8f15af1a3f3610733b42e1b70ff367b3c72948d99bb79430
- SSDEEP 49152:OpF1DniJZzXjB/mBgxdxqxKjYRy8kG5V8QNfC+cHVheehy:6vEZfB/VmK8f9gVhb
- TLSH
  T19DE58D16766C80B5C1BBD17C96478B4FE2B134461BA257DF22A44B4E2F77BE10A3E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  experimental/steamclient.dll
- Size 72KB
- SHA256 3554fa409a7df923465fa2647a26de31bbdcc96a7f2e42e432a2aa7169774400
- MD5 6f204772b6ece27acd5a81470e9f3be3
- SHA1 7fa6f98429cab766336aaaea6a8ecb359b497ccc
- SHA512 89ffeda1024e5da13b8e81d2179cc4b452e7f2f991fcf5e2ec359a85d8e508852369d07abffed2c30b1accb7e9f9fce524a00bc00323b92ba55c66dcb6236eed
- SSDEEP 1536:A/NA00qdebDAmUXt5lHrDdrrlr9TA/rDxsWqdQcd72OWlH:ADebD+t5lHftRSf+/72lV
- TLSH
  T1DC73491076D1C871E5BF29311174C6A16A7EB8624EE09DAB3B86177E4F300D1FA35E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  experimental/steamclient64.dll
- Size 87KB
- SHA256 7f9fabf5055db099c90b952739e970cd6aab01171d1a980bf96fe9b77885a6a6
- MD5 502fd49c2abac79889b0642525bb226c
- SHA1 73d78af41c12b1aa4fdf404f5a1a7a17674a8e2f
- SHA512 3e30e1edab640f329c6bd9318878e904e6ea1ecb19f683a3688a9ad519ff3924e0c604b829f25ff3ccca71a41bba225191cbda9efbb1fc4bc4fa73f488d20972
- SSDEEP 1536:zlq4T2wNubeBLcaeYSUEBbaxiIXLYDtTpA7ai3ubCvmTXrvDV/NsWLxd09dlfSvt:Rq4T2qu+LpeYhEFaxiIXLk5poai3ubCG
- TLSH
  T17D93299A63E504BAE177853888635E45E777F9121521CF6F43A4029E2F633A08E3AF31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  experimental_steamclient/steamclient.dll
- Size 2.3MB
- SHA256 23b86547d3733d7909f4a3cf680441c166a8dccc651f30f7f44b58e5bf5ab8c1
- MD5 e87b69d973206ce2226e0c30711393db
- SHA1 a567b8584f0db304f7ffdfbbbffaf6fa4939c1b9
- SHA512 f64aff55ce1da38c702fa7922c214df55c9809373f8fd01459af0ee40d769e7c07aa5e3296cf7f3de4511396bc8a97619fd13ca833cef024de01dc502a7aee35
- SSDEEP 49152:TYVE8qed9IlFzM5V9nWewuK8/4aEAIeCZ7Y0MPXCoLy3MK+EI/h5HVXFVMiBo:EV/qesTzMHJRwuK8APAIfZ7Y0g0ahxVX
- TLSH
  T199B5BE22B682C0BAE29F11B17A78E76F403C65440B2406E7F3D92D6DBD610D35B7B25B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  experimental_steamclient/steamclient64.dll
- Size 2.9MB
- SHA256 4c2813290f2547d92d40d7dc0a54d9ffbdce9a3d44c055b45a496366d829be5d
- MD5 905d79cd9aee381759ea7b04b5a4662c
- SHA1 99900f79a03ebfb92c655172d1dd1e61976c3c76
- SHA512 606a2f648f75dff22e552d417902a67f75019deb183386d8ad9b38502bcb06c042764b292dc366702138d7b7a69996cfd2f01a0bb9eb6b4f82b66280c50b2fb8
- SSDEEP 49152:xRnTK0rCnUH1uGd/hg1gfkKscX1RXvOdqLqSHV:xpTwGd9nj0OV
- TLSH
  T12BE58D1A666C80A6C67BE0788A478B8FE37134591F6167CF22604B4E2F777F1097E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  experimental_steamclient/steamclient_loader.exe
- Size 98KB
- SHA256 6d76785ff9806540c469c3b466eeacacb5d129d38723d53936a90b419f22a5a0
- MD5 2a64f1e0fbb0e0687bd41dedf3ab19e8
- SHA1 5601fd7b42835ba56fb13e0fe1915964ab0a42e4
- SHA512 999b836c5bf03851bbbafb08baa32aa6f27db736b38093eff2895cabd5af7e8462eb97a06d0560dc28df9011bfb089884ab1d3eaf496d9963e58ada5fa04de8a
- SSDEEP 3072:ku1hlvOR3R2gFL4pTGt4/NBOtJwgOeYg4fFcIqeBsmSxsyLZ:Ch2Uly/Tg7cSxHLZ
- TLSH
  T127A35A4175C1C472D4B22A351874DAB14A3EFE301E609FAF2398067E9F746C19A36E7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  job_id
- Size 11B
- SHA256 47d42a5d8a39a3e4a9432854c564cbc8f0e424e0a45062b5a81bacab7a67e8b0
- MD5 d389b339cbf05f00cc0c9899d16e47bf
- SHA1 8d8fabf0547af97b63b955b326e21c0188eef5fa
- SHA512 8b0de926c942dbae9ec3450024779834ebf4371dab32b0a657a197fde25c8f11e0ce6607f83fe8afdab9808d4e18fb6adc4c1f1e8b66f64ab7fc98332f2def0c
- MD5 SHA1 SHA512
Score

3^/10

execution
behavioral17 behavioral18
- Target
  lobby_connect/Readme.txt
- Size 768B
- SHA256 e190c2244ef9b2dbbc2d72ad9f68de4085d78be09cae0590c2995ef075af3911
- MD5 0751932603b933e1d9080a9f8dbdfa3a
- SHA1 88cd6dc7b2f0471d2945847b935040a9ac98166d
- SHA512 b61d0382f6171361d23a278535e043ed44cdcc4e9de780c2bb154aed214da9d18835423b2ad982c3e94dc3d7d9e1ee7daad66be8f0ec960fd20d7743c67e2a1e
- TLSH
  T14101851B8385A3F30F3640782248B5EEAB18C0B82329443228CD6A08033A92796227CE
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral19 behavioral20
- Target
  source_code/Readme.txt
- Size 92B
- SHA256 b3690f5b3508027658f50fc25a0d9f628f8b6a9a35b32a0a16d303b3fe06c69f
- MD5 77977e3f9b18fbefd2c30d1801e87289
- SHA1 9f73a5fb3572bbea19df772d1eb481962c9730dc
- SHA512 e082b162413ed62c7a0395e6672dd1f897a79443b283160b45fa9753f5a90fce695f589456fd133ebf62b8dfaa6373875c060ec7599760abcb7867be58a2fb72
- TLSH
  T1B3B01205404407B7905A596871CF08A18108458D6EB3B0F40E39C7144075E114691F5C
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral21 behavioral22
- Target
  source_code/source_code.bundle
- Size 5.5MB
- SHA256 aa751fbc421cab0da4ad4edd2e5080d304cfb32794f92430db8a4cb0f291efbf
- MD5 2854798ebf25e961f2e34d36049837d0
- SHA1 bb086bbcc65d1177b60172cd09e8d0c3b9d82a43
- SHA512 bbfd63fbc4296febfc926525f15fd8d8a7616c1274aa8500a89649b07690491d4db382b015ae56def7b85886ab8099d1a743a31e2d046e67d4792353be924c53
- SSDEEP 98304:hYSIZLIdCmJ4kM0GLiEmrUQsfn04Y67Wk1inzyiMYMXpQyOIiUSFU3jfawER:hCZUdCmKkM0GLSgQM0f67Wk15i1WnOIO
- TLSH
  T1F646339877574C2428208A6F8BD7CC343FBAF68875E21BB4E55B1197F21B5BF6463A00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  steam_appid.EDIT_AND_RENAME.txt
- Size 4B
- SHA256 5db1fee4b5703808c48078a76768b155b421b210c0761cd6a5d223f4d99f1eaa
- MD5 e48e13207341b6bffb7fb1622282247b
- SHA1 77ba9cd915c8e359d9733edcfe9c61e5aca92afb
- SHA512 6f0ac65fe01188660aad900bfe16c566ebf0e56c0a7d4a15bd831049108de80bd3a2fbf1a8b91662433a40458ec208a207cab073f190bd65b889e95e4fca8e09
- MD5 SHA1 SHA512
Score

1^/10

ransomware
behavioral25 behavioral26
- Target
  steam_interfaces.EXAMPLE.txt
- Size 573B
- SHA256 f32a58870b3da4214e4d9c132783e6e8f2f277aa9025cf3211ddfef9a3becd5e
- MD5 06a47a21f1af5a7fb5a0623c5f92325d
- SHA1 d0b2c9917782d0e4fd09c07e7e36a0c1ee33ed4a
- SHA512 e4f64390d00092239b8fe7666c160b0652937f179572a88269c8c28bf6a56b04d796a5c6bcb3b3811db9eb9d63c7dd122446f89c77d83c81113c2c0c0bc79836
- TLSH
  T173F0121F61223D694F28B4E641E1B922F14C35678680D8FDDDD7B6C10324E6413AEA01
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral27 behavioral28
- Target
  steam_settings.EXAMPLE/DLC.EXAMPLE.txt
- Size 114B
- SHA256 8d9f6c7af3cc9b991abdb645c3afa76835b6cd12b6b7ed45b4f610b4673c3200
- MD5 82714e9dbd5883c546dc02748787dc6c
- SHA1 e833ffcc790e05b98cacb6f95c17aad684dab384
- SHA512 8e7a0db2ef6a27d1159391d3929eacd1e2e4326da67d396bfa08b3cb1c582eb09961d958a64c58b03ae06423e7f5aee6e828bd3e13436909cb1eefa1ae2e63cf
- TLSH
  T1B9B092BCD10E67F2806C4A16660AA68D2F0C533711A43989B44A06E2E166D12C612EB0
- MD5 SHA1 SHA512 TLSH
Score

1^/10

ransomware
behavioral29 behavioral30
- Target
  steam_settings.EXAMPLE/achievements_EXAMPLE.json
- Size 65KB
- SHA256 c90b571bd159618a8837f6e5f77ae254985d90df3634acda7f79f0d382bc75c8
- MD5 43f5f12838b2b05a0a08e4ce681b08ba
- SHA1 dfe48606af2042bb82463546c242840f55283662
- SHA512 3121a8f1c58a254d4abd748acf05003b9364bb3be5577fbfe94d4a91291a23760fd2918133b9e194f0cdeeef9a9482a600e01f9cfe773ae0fd25e24acb7494d9
- SSDEEP 1536:AtkapXFsMhpecr0w3loy+c0HSKhdPgebKOiRW09/y/n0/VLiRTH4+JImGHociSm2:/YN/j
- TLSH
  T14C630AA6DD506B33124D825A2CDBA66E2037525F1C387E497F58A48D3FAEC2F7532318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy