General
- Target steam_api64.dll
- Size 309KB
- Sample261024-rja2lsav2v
- SHA256 e3fe06e2d802c2f753aeb46869e2af898f34715ce85f08001456fd8a80ecd21e
- MD5 74d1ec6d52c4251163882e1c3eabe4c4
- SHA1 8c6388f77a7a1c99dfa1005b50ba15f5faf12d73
- SHA512 65e42841e87b5f157e15f190ddb7e829675eeab477df0e632ec1e82eb14a126240eca97df659f42f9c6c71134634c0d1215b534a699536bbbb415829d2471919
- SSDEEP 3072:jU2atJBBcsJW4pC13Dz3H3jfwv7SpDLwKYIzY2z9Z5lhTbCg02Z+kdsuyq+nUMCB:wTtJB9s13Dz3ziiDLB/Yq9ynv2CLj9c
- TLSH T1F7645B3962750CF5E077C13A88825E0BFA75344B23219EEF266062369F177C21EBB791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
steam_api64.dll
Resource
win10v2004-20260911-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
steam_api64.dll
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target steam_api64.dll
- Size 309KB
- SHA256 e3fe06e2d802c2f753aeb46869e2af898f34715ce85f08001456fd8a80ecd21e
- MD5 74d1ec6d52c4251163882e1c3eabe4c4
- SHA1 8c6388f77a7a1c99dfa1005b50ba15f5faf12d73
- SHA512 65e42841e87b5f157e15f190ddb7e829675eeab477df0e632ec1e82eb14a126240eca97df659f42f9c6c71134634c0d1215b534a699536bbbb415829d2471919
- SSDEEP 3072:jU2atJBBcsJW4pC13Dz3H3jfwv7SpDLwKYIzY2z9Z5lhTbCg02Z+kdsuyq+nUMCB:wTtJB9s13Dz3ziiDLB/Yq9ynv2CLj9c
- TLSH T1F7645B3962750CF5E077C13A88825E0BFA75344B23219EEF266062369F177C21EBB791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Uses browser remote debugging
Can be used to control the browser and steal sensitive information such as credentials and session cookies.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory