72ffe8859eaa63637f5a62b7c454241db35938f8326f6ccf20352e00f8df2fe5 | Triage™

Login
Reports

Overview

overview

4

Static

static

1

SteamSetup.exe

macos-10.15-amd64

4

$PLUGINSDI...er.bmp

macos-10.15-amd64

1

$PLUGINSDI...rd.bmp

macos-10.15-amd64

1

public/ste...an.txt

macos-10.15-amd64

1

public/ste...an.txt

macos-10.15-amd64

1

public/ste...ch.txt

macos-10.15-amd64

1

public/ste...sh.txt

macos-10.15-amd64

1

public/ste...ch.txt

macos-10.15-amd64

1

public/ste...sh.txt

macos-10.15-amd64

1

public/ste...sh.txt

macos-10.15-amd64

1

public/ste...ch.txt

macos-10.15-amd64

1

public/ste...an.txt

macos-10.15-amd64

1

public/ste...ek.txt

macos-10.15-amd64

1

public/ste...an.txt

macos-10.15-amd64

1

public/ste...an.txt

macos-10.15-amd64

1

public/ste...an.txt

macos-10.15-amd64

1

public/ste...se.txt

macos-10.15-amd64

1

public/ste...an.txt

macos-10.15-amd64

1

public/ste...na.txt

macos-10.15-amd64

1

public/ste...am.txt

macos-10.15-amd64

1

public/ste...an.txt

macos-10.15-amd64

1

public/ste...sh.txt

macos-10.15-amd64

1

public/ste...se.txt

macos-10.15-amd64

1

public/ste...an.txt

macos-10.15-amd64

1

public/ste...an.txt

macos-10.15-amd64

1

public/ste...se.txt

macos-10.15-amd64

1

public/ste...sh.txt

macos-10.15-amd64

1

public/ste...sh.txt

macos-10.15-amd64

1

public/ste...se.txt

macos-10.15-amd64

1

public/ste...ai.txt

macos-10.15-amd64

1

public/ste...sh.txt

macos-10.15-amd64

1

uninstall.exe

macos-10.15-amd64

1

Analysis

max time kernel
843s
max time network
900s
platform
macos-10.15_amd64
resource
macos-20260915-en
resource tags

arch:amd64arch:i386image:macos-20260915-enkernel:19b77alocale:en-usos:macos-10.15-amd64system
submitted
30/09/2026, 14:01

Sharing

Copy URL Twitter E-mail

Static task

static1

Behavioral task

behavioral1

Sample

SteamSetup.exe

Resource

macos-20260915-en

macos-10.15-amd64

1 signatures

900 seconds

defense_evasion

Behavioral task

behavioral2

Sample

$PLUGINSDIR/modern-header.bmp

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral3

Sample

$PLUGINSDIR/modern-wizard.bmp

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral4

Sample

public/steambootstrapper_brazilian.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral5

Sample

public/steambootstrapper_bulgarian.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral6

Sample

public/steambootstrapper_czech.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral7

Sample

public/steambootstrapper_danish.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral8

Sample

public/steambootstrapper_dutch.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral9

Sample

public/steambootstrapper_english.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral10

Sample

public/steambootstrapper_finnish.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral11

Sample

public/steambootstrapper_french.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral12

Sample

public/steambootstrapper_german.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral13

Sample

public/steambootstrapper_greek.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral14

Sample

public/steambootstrapper_hungarian.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral15

Sample

public/steambootstrapper_indonesian.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral16

Sample

public/steambootstrapper_italian.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral17

Sample

public/steambootstrapper_japanese.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral18

Sample

public/steambootstrapper_korean.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral19

Sample

public/steambootstrapper_koreana.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral20

Sample

public/steambootstrapper_latam.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral21

Sample

public/steambootstrapper_norwegian.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral22

Sample

public/steambootstrapper_polish.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral23

Sample

public/steambootstrapper_portuguese.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral24

Sample

public/steambootstrapper_romanian.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral25

Sample

public/steambootstrapper_russian.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral26

Sample

public/steambootstrapper_schinese.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral27

Sample

public/steambootstrapper_spanish.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral28

Sample

public/steambootstrapper_swedish.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral29

Sample

public/steambootstrapper_tchinese.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral30

Sample

public/steambootstrapper_thai.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral31

Sample

public/steambootstrapper_turkish.txt

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Behavioral task

behavioral32

Sample

uninstall.exe

Resource

macos-20260915-en

macos-10.15-amd64

0 signatures

900 seconds

Report Analysis Logs

General

Target
uninstall.exe
Size 155KB
Sample260930-rbwcksgh69
SHA256 72ffe8859eaa63637f5a62b7c454241db35938f8326f6ccf20352e00f8df2fe5
MD5 32109e2aac377fa07b849f4f4033edc5
SHA1 a7b87a221744fb2e36327be0a34c17b7d734c47f
SHA512 688d9b51060d84c4e2dd0ddbb20d43bbc8bf93a903f26e855f546335bd7a5c9ef5c6f888dff35d379cbb1d782c5e231b33831b7272cde2b40c2d7fc2b85ffc0d
SSDEEP 3072:iIAe+3aJpgWXTBuq/JFONM2cZ6iKowuq12ApG3s/6:izB+pgURJFOS21iQ5i+6
TLSH
T1EEF36B0167E4D12EF9E34B70E8E286F65735BC55E5228E9F77847F1E3834200AE493A6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

Processes

/bin/sh
sh -c "sudo /bin/zsh -c \"/Users/run/uninstall.exe\""
1⤵
PID:464

/bin/bash
sh -c "sudo /bin/zsh -c \"/Users/run/uninstall.exe\""
1⤵
PID:464

/usr/bin/sudo
sudo /bin/zsh -c /Users/run/uninstall.exe
1⤵
PID:464
- /bin/zsh
  /bin/zsh -c /Users/run/uninstall.exe
  2⤵
  PID:466
- /Users/run/uninstall.exe
  /Users/run/uninstall.exe
  2⤵
  PID:466

/usr/libexec/xpcproxy
xpcproxy com.apple.spindump
1⤵
PID:512

/usr/sbin/spindump
/usr/sbin/spindump
1⤵
PID:512

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

© 2018-2026

Terms | Privacy