2e2d9f2c8bf05dcf46399736b294b774391d0e7969e615cbbc1cd345b16a37b3

Resubmissions

10/09/2026, 00:49

260910-a6ql5sshqg

10/09/2026, 00:16

260910-akpgysbq9t6

Sharing

Copy URL Twitter E-mail

General

Target
How-to-Fish-SteamRIP.com.rar
Size 379.0MB
Sample260910-akpgysbq9t
SHA256 2e2d9f2c8bf05dcf46399736b294b774391d0e7969e615cbbc1cd345b16a37b3
MD5 731047ffb510c65dc7e6bb9bedb62eea
SHA1 1e6d2f3108a3307714a3287f8cade5102785a710
SHA512 5eadeb6b18bc5a48349e7f7fabd3667a9c6c42c4e03eea126e83fc4ed7b4ca4b4f7e5bc6e751b92a9b8d3c9ad7113f258d5672faa3962a1c3e3f11f95071ed51
SSDEEP 6291456:ap1ylt9/hgOaRJSQWnhE6SC06+RRLoHDlgwg4/DeId9U9kzMRy0caW74ac3WwgcJ:S1gDWJSTEC06GRClgw9DeInCbwx7cflp
TLSH
T1B819335546C26A0EC602967B0220D8FD6ABFFF9E6BC55306F927509AF04FBD78C24643
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

execution

Malware Config

Targets

- Target
  How to Fish/How to Fish_Data/Managed/UnityEngine.XRModule.dll
- Size 84KB
- SHA256 26c0c5f1c83f27420e284e676d18267d96e08966d2e1fc32d7517b62a65d6f02
- MD5 7f597ede17debc83535fc76a0fa3598c
- SHA1 3b8169e1abba5c0251b11bbbe02a6bd3436c7bd8
- SHA512 c0d30d89096fc80c66d0fa65249929cb1e09aaca53e39f40145b8724b1ce46fed39e6e9b5491f2b954c1b113582301ea57910e5721e8df88122214762d91174d
- SSDEEP 1536:8bwWULzCayD1nWn1lbRSViL44pldpmN8JHhjMvEFsQFt62jrGhiQya7:UULjjFRk8BmGWSa
- TLSH
  T1B7834AB53BE9885BFECE4E3BF4308601BE34E1495657D39A128CE0B824567DE0D256F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1 behavioral2
- Target
  How to Fish/How to Fish_Data/Managed/UnityEngine.dll
- Size 196KB
- SHA256 421a89ead3f9481eb6b33449d529024eae9ea137c23a8704778258834bbfce52
- MD5 b5a752a39932760a81124fed550324dd
- SHA1 051270659b29ade46c5b2ffc4dba29732424b1c8
- SHA512 80405ebbf4780d0699f079072cd6fcd7d65e5e44738cf704b01a48beed04d854e59929f91e8b1dd7133623519f2ff720ec6b72458e4323d5509604fd6478a0bf
- SSDEEP 3072:/wSNRC7GGOpff+m3BLwQ2WUnmjvWSQ2cm4+qIsBMLku8U9b:/fNRCaLGTkOJ+1sYTb
- TLSH
  T1FC14C4627B0A5E62EE8AD7329CFB037157F0E0CA47B687E6221D2A05CDF55C43E25349
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  How to Fish/How to Fish_Data/Managed/com.rlabrecque.steamworks.net.dll
- Size 410KB
- SHA256 6d654e0d82c563dc1af3342022aa61830727055f010e16a93762cf74b71be7c9
- MD5 983f3a52d875cb29958a75219be8adc0
- SHA1 d43a04b8cefe91d5dc795ff53f17698aa429aac2
- SHA512 7d62ac2c29cb5c5c6022356b4ba725b9fdc39cdea12b3ee94ad8701b23b7c4e20265e5460b2769ab22e7f0ff4f5bd667f38c1eff5bf4aade7727618ea356960a
- SSDEEP 6144:ouG6jhGHm7xfPXZAUgTszwj+u4akSobR0ClNRQAjFDJxWNqkT5M0U/k8G5:owYHmlPGU2l+uh+1FDJleC07L
- TLSH
  T1389407253344653BC25D877452925E1FA9A2D0E32B1FAFAF7640093E4CE6BC95E232C7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  How to Fish/How to Fish_Data/Managed/mscorlib.dll
- Size 4.4MB
- SHA256 eaf6b07fd716403e8fedc054bdd1650142d1dc95d34c01d9485de97b5a0dd84b
- MD5 887f0a0c9fc2c8c184eada066413ed6b
- SHA1 599b2e50f49bb9a74cd7f5a47066f055e631f91b
- SHA512 f8369671ef28e0ffaa3e1eee3f8b27e1c0b1ab042e77830b8f718b1ee16fc4c528e2c42bf6c31ed0a63b90682bdf0f0e07a7249386c4c4a9fb9bb89840938c6b
- SSDEEP 98304:jTyNG7s2AAfF1NAzzs6IwDsSfk+KWtUndZBlKj4Xl59xWIKWBCFzXjg1WUqSB21C:j2as2AAfF1NAzzs6IwDsS30
- TLSH
  T104263A40EBECDF16E1FB7B3998B612111AF6FC95AB37D34E6114A17C2862B408D21763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  How to Fish/How to Fish_Data/Managed/netstandard.dll
- Size 88KB
- SHA256 6ae62e082dc494a2433984177f60ca4db5fae69b1f360a8b33754172b310b8c5
- MD5 c61967ebe7f07f6a5a1b3f91842bbc3c
- SHA1 c2db6e7376977c5c7f17d816406ca70f95d8e1ef
- SHA512 5e63289f67a2b5d436d192a6354444327c4939e854cdae82614950885265fcc76739219138f22c55171362b735169ed77e0699958b4960a909f6ec919ce3aa49
- SSDEEP 1536:zsYKt7WAMU9UYk5f4bJUHGPdghpuSX5qUE7cLh9z+:3K4AMaUYm4bJUiIBh1+
- TLSH
  T18E93C422FD84DB33DECE9779C973545207FA33CD10761EB6444AB5AB84D6A44223236E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  How to Fish/How to Fish_Data/Plugins/x86_64/lib_burst_generated.dll
- Size 1.2MB
- SHA256 f95223ca2a74b9f50904e41269d8536783c6b1caa0abcd48ba9d75555232960e
- MD5 d6228c038c32ed9857acf0b1402337bf
- SHA1 6045281e51f51e6e654685a995da06992233534e
- SHA512 afb3b11026b73a086c0b9da233cd9505aded7ce9fbcf552e8650287997108548cc6d34ab04d87698994fd6a6740dd94c00d2835c562e4ea7d6472c17370c8995
- SSDEEP 12288:w8TtFrHdU2bpEcrzg7/T9Sbtu0gzcDa/XowYzv8Gm1pV35LtxJxAtpK6u3IWUCp:DS2bpECg7JShyzOvi1bp7cK6Yp
- TLSH
  T12A457C2532A7A0ADC42AC470431F6763B722384917211DF791E489B23FE6ED22FBE715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  How to Fish/How to Fish_Data/Plugins/x86_64/libonigwrap.dll
- Size 538KB
- SHA256 6d539f2ad6e1b58d3c8836b9c3a1d50c97cbd7a6ca0c5de25d994a7c4b1ecf42
- MD5 ab2bd6d029d63fcf779f2032af98a5f8
- SHA1 28b1fd59b714d81bcfb353d1f2ae5cd4a9190656
- SHA512 7ca95bf475dd49069c0accfee0f41783824bc2e521ac7238f7a20aa1c04896b629c82d9518715e9193597f7efeab46f27cf3b2cdb382817ea58752abf07ccc05
- SSDEEP 12288:cGDjNa62yL+/RrsXdgcTE33T8Hhvrol87WruRGS2:cGDj9ZeYdDEIrolQx2
- TLSH
  T1D7C4C503FEC3DBA9C1AE4970C896D3F52136EC605A108E572358BE37BD626205FD962D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  How to Fish/How to Fish_Data/Plugins/x86_64/meta_voice_chat_neteq.dll
- Size 660KB
- SHA256 2881159d2359de92f2edac78df0adaf19af57148e2575a1bf31628700c77f54f
- MD5 d5cf5514b4f8ba2a40f5eb4c5391ef03
- SHA1 94d0992be692268254f25b45cb5d4744894c4efb
- SHA512 8a764a09ffe81151842dfc3c5182eded6b9ce8021d9ee552331f0cff7b06c5ae3cdf452fa221679771125e17603d369eb238897696a158e682848f9e5e5ad7d0
- SSDEEP 12288:jB5VkRzoY5ydkoP4S2C0+6NLtMxd5AuRKERB3qqqqYb6DDZu:jB5V2zoY5SkoP4NLtkADER9qV
- TLSH
  T1F0E43923E7A704F9E07AC134B506562BF935328A073803E7A7C046516BE5EF895BE3E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  How to Fish/How to Fish_Data/Plugins/x86_64/rnnoise.dll
- Size 137KB
- SHA256 d9d45f82de54aa10cd3499db8cae636a96015e185824dbbf6021d2044360f466
- MD5 2ee44c6231eb3b12c2cfcef4244b2daa
- SHA1 ff6507fed41fb8fd9baeddda2d676806d4bffc3f
- SHA512 a55ee3ee5af582a7046ed835eed3d0c739748ddfedb6b82919832aa072840dc91fa28cc5ef444e8f6675cf2ef78f06dd5ef8cc7c2fb5b3928ec1bc9efc8a7900
- SSDEEP 3072:WKaiQnW/uG6UO1XDiTBNHibhX4m9VGKQjstGsQfw2pKsV/uC:WS/tMX6EX4m9V5CTRpKsV/uC
- TLSH
  T110D3E005B1F996E9E132507AE1AAF14FF1313411072185E743A988BC7FA2BC55FEFA02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  How to Fish/How to Fish_Data/Plugins/x86_64/steam_api64.dll
- Size 312KB
- SHA256 670d654aa3255c5061cf0236a1cdbb2f5076cbd5ae44f613b6f4921558e83e2d
- MD5 b3caec4d455160acf21a318073c40dc7
- SHA1 fcb09f9da2172d58fbf4aa57bdd30d607ccbf237
- SHA512 bd3417c5c5c022f2b3f729283d77a335200fab8a7c439eee00f9d298608f804a3f6698049d30351d8a5dbfa3e728518691472fc78b91b8785ca5d1a5c52c6142
- SSDEEP 6144:JfgdBtTW65Q6tW31ghwXRTRylO2CXuPu+SQ:JodBtW6pte1gsbys2Cza
- TLSH
  T199645B3962750CF4E077C13A88565E0BFA79344B23219EEF236062769E537C21EBB791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  How to Fish/How to Fish_Data/level1
- Size 206KB
- SHA256 f373214bfd2e36292f71a718463029f5948c3c74df9a6eeebd79f9be167a85f9
- MD5 919f85ce7543b59ea86d46bd6d8f7cad
- SHA1 331684ebb5973468bff923a6015e1450bb7362c5
- SHA512 a273921c27b6f624b2c1f05b228a7cb9dc7bda78e8c1b84da7a0d75508d2108bc4abfa4d08895b3272862a70190247ecacd978256aafc25c8f033bfe55b5f985
- SSDEEP 3072:tldbnyy+582cKzdKi0xih8atpBHUj+f/Hprs:tl5F+G2Wqh8azY
- TLSH
  T1E2247001BB42A64BE7BBB73795E75F44F736D0448B2F633366A886AD6CDA3884D01443
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  How to Fish/How to Fish_Data/sharedassets1.assets
- Size 334KB
- SHA256 0be0db8025b9620a1ce62ce3917c9d7ef757d6a93055d4b05101ebf9aa98bd4d
- MD5 5dd8d727be34a151f2f28590e6c33ea8
- SHA1 d46b612e9d00f8b1f46f88c04388f85f79fdc385
- SHA512 fc930778fb30c36900931dd5efce7fef10a3c0c1cd4971145d98cf1c2805fba819d2cb2cef67940f6c7ceb0dd106963f5dd2f1d5c70b68749ad6237cd50cbb0c
- SSDEEP 6144:HEaosol2leopbqtkhbd6zEjS2/mMQu5CW01GTt:HEpHo7d6zE+Sm
- TLSH
  T1CF747B02BE23DA11F7FFC43EE93B3F6AD51BA006F3165166AADDC2C5948DA6118C1613
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

execution
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
behavioral23 behavioral24
- Target
  How to Fish/MonoBleedingEdge/EmbedRuntime/MonoPosixHelper.dll
- Size 596KB
- SHA256 a08c0e9b6f0220e2e842fe2eea4efcebbc6fd0ea0dd7d8087abbc6e5c78c05a2
- MD5 45f56aa2127ecf52cdb07f4b8c5100ea
- SHA1 fc6a8c307e9d838e3a4c890776e68c802735acf3
- SHA512 aa80051f1381bda2a87b99d3431edc9d385a3cff59ab94543b8e3db0b43c950b5476ff329b54376c7e1ba5f40bc62036006a0bf2e131976448508195baa2fb32
- SSDEEP 12288:9OmNAmdeVH9Mwe9Ek/7jY4hOTBPyi9GaA:9nAmdcMj9Ek/7jYSOT8gA
- TLSH
  T15AD47C56B7A402B9E577D138C6834B5AEAB27811572093CF03A897AB1F137E11B7F360
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  How to Fish/MonoBleedingEdge/EmbedRuntime/mono-2.0-bdwgc.dll
- Size 7.5MB
- SHA256 165472e153edbf04ab93c81988c4d0a6a47794e8ab43ca4f4c0e18e053bb0ee2
- MD5 d15c502c7bf706037ad34b8a9f66cde4
- SHA1 e6c0df1e64937d9d2c123b1f29bd7662b59b9aa3
- SHA512 d30f94c868e4c1001b61896fa61c12665ab848ff3b4ec8fa52be96d2ab66f77e54c4eb72c45d5d8548a94d875ec12110f7d453059d28842acec5dddb12576ac6
- SSDEEP 98304:J1JKQuu+DfvOtBQkSMDu0moP74cJGOlwoA:J1JKQurDnOtykNBP7vJGOlwT
- TLSH
  T10B767C5E92660068C8ABC23DCB676B73D375700443306EDB46905F6AAF23AE5537E7C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  How to Fish/MonoBleedingEdge/etc/mono/2.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  How to Fish/MonoBleedingEdge/etc/mono/4.0/DefaultWsdlHelpGenerator.aspx
- Size 59KB
- SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
- MD5 f7be9f1841ff92f9d4040aed832e0c79
- SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
- SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
- SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
- TLSH
  T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Contacts third-party web service commonly abused for C2

Command and Scripting Interpreter: PowerShell

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32