General
- Target WorkshopDownloader.zip
- Size 22.1MB
- Sample260908-fn72cssbpc
- SHA256 61d6cf2f6a9c51f613621cca2a7549349ca8866ade7a8842f00267614d212543
Malware Config
Targets
-
- Target WorkshopDownloader.zip
- Size 22.1MB
- SHA256 61d6cf2f6a9c51f613621cca2a7549349ca8866ade7a8842f00267614d212543
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target DepotDownloaderMod/DepotDownloaderMod.deps.json
- Size 7KB
- SHA256 4c7728140a17ec8b2664fd6cedc94f5356260ada99a66b9e8512c10c6430b4d7
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target DepotDownloaderMod/DepotDownloaderMod.dll
- Size 172KB
- SHA256 f6200eadeb9e36f6e1529a9592302bd04c17c2be3416bd43641a66262c777e99
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target DepotDownloaderMod/DepotDownloaderMod.exe
- Size 190KB
- SHA256 dd8fdae42102ccf61ed98892c723ec935c86cdb551f1a9c05d4d573ee74f0e58
Score1/10 -
- Target DepotDownloaderMod/DepotDownloaderMod.pdb
- Size 50KB
- SHA256 3508dbe17a8eb3cdefda1e0d85cc00624963fb3e949da776fbc9b64e207a3bee
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target DepotDownloaderMod/DepotDownloaderMod.runtimeconfig.json
- Size 482B
- SHA256 ab8e3ebb2edfba8d0abc0aa80b96d96cc5957c4d1861b30b51b162b6472742a8
Score3/10 -
- Target DepotDownloaderMod/LICENSE
- Size 17KB
- SHA256 8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643
Score3/10 -
- Target DepotDownloaderMod/QRCoder.dll
- Size 141KB
- SHA256 3c5674f67a97fd9ed38dd537d892ee9efd328afad4d6c1d67f99fde2c108dd57
Score1/10 -
- Target DepotDownloaderMod/SteamKit2.dll
- Size 6.2MB
- SHA256 2931f875143f17e104bd4de59cb839c84211b11c3b2aaa0bdd5257fe0b3ceed6
Score1/10 -
- Target DepotDownloaderMod/System.IO.Hashing.dll
- Size 54KB
- SHA256 a1ca98abdf21ef16e4a8a1c2b9f8b3819957bde39495bc6d4eddaf0453407853
Score1/10 -
- Target DepotDownloaderMod/ZstdSharp.dll
- Size 386KB
- SHA256 f0149a8f123c9ab8baf67df78096ba5b4d983c1030ad52ac1099a3f713eb60c0
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target DepotDownloaderMod/lastsavelocation.cfg
- Size 70B
- SHA256 49c331fc005c4ac8dcf500240ca92c4ae44fff0dadbf253a0c0c34f152697e0f
Score3/10 -
- Target DepotDownloaderMod/protobuf-net.Core.dll
- Size 292KB
- SHA256 d8b333ec409d0cc23954a1da07028e54cdaca7d1061a52e4ae265baef63d8bd1
Score1/10 -
- Target DepotDownloaderMod/protobuf-net.dll
- Size 278KB
- SHA256 c482090bf4002b2b65a576a0e44ffa860b63086ff8c3db122f7ea480aeb6f2d7
Score1/10 -
- Target WorkshopDownloader_Pro.exe
- Size 19.6MB
- SHA256 64109c55eb7216ed219b3531f01d3e5c82534a3e31083e992fde27e34d365e11
Score7/10-
Loads dropped DLL
-
- Target SteamWorkShopDownloaderpy.pyc
- Size 21KB
- SHA256 a95fe51313f3405441cd2b99f3c4cba90e92b3774642e836c5411522cc787c74
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.