Resubmissions

24/10/2026, 14:12

261024-rja2lsav2v8

24/10/2026, 14:09

261024-rgacasat7z6

General

  • Target
    steam_api64.dll
  • Size 309KB
  • Sample261024-rja2lsav2v
  • SHA256 e3fe06e2d802c2f753aeb46869e2af898f34715ce85f08001456fd8a80ecd21e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      steam_api64.dll
    • Size 309KB
    • SHA256 e3fe06e2d802c2f753aeb46869e2af898f34715ce85f08001456fd8a80ecd21e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Uses browser remote debugging

      Can be used to control the browser and steal sensitive information such as credentials and session cookies.

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks