General
- Target steamclient.dll
- Size 6.7MB
- Sample261003-tcd6sssamd
- SHA256 e4f4b71eebe895db1fedbed1a23344e53f4b9b5cd345faa82b74d9f5f2cafb6f
- MD5 97606e97b6f8abdb6f72f5885526da8e
- SHA1 768ce3cd789c3249742f8e6e43a8996b75821b79
- SHA512 29cdfd6fba979720d742fdefb4ec3c3df45dbe726ec4116741b9671155e736429ca8f2856a06e6fdf9dfcd0032d70267513c72d0d7ed60fb106e0ba690555477
- SSDEEP 196608:y18U9OLNe1308LKY4exrCFpUAXFOp0NBemgeZ2r9:o86INe130WKYR3Asp0NYmgbr
- TLSH T1BC6633730CA03ED7C2760376AE53AC155CB1FBA24E096775B41F87A6814864DCFF862A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
steamclient.dll
Resource
win10v2004-20260911-en
7 signatures
40 seconds
Behavioral task
behavioral2
Sample
steamclient.dll
Resource
win11ltsc2024-20260911-en
7 signatures
40 seconds
Malware Config
Targets
-
- Target steamclient.dll
- Size 6.7MB
- SHA256 e4f4b71eebe895db1fedbed1a23344e53f4b9b5cd345faa82b74d9f5f2cafb6f
- MD5 97606e97b6f8abdb6f72f5885526da8e
- SHA1 768ce3cd789c3249742f8e6e43a8996b75821b79
- SHA512 29cdfd6fba979720d742fdefb4ec3c3df45dbe726ec4116741b9671155e736429ca8f2856a06e6fdf9dfcd0032d70267513c72d0d7ed60fb106e0ba690555477
- SSDEEP 196608:y18U9OLNe1308LKY4exrCFpUAXFOp0NBemgeZ2r9:o86INe130WKYR3Asp0NYmgbr
- TLSH T1BC6633730CA03ED7C2760376AE53AC155CB1FBA24E096775B41F87A6814864DCFF862A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger