417b7d348652ee9c7d2609edc921154cac2c52299975f360f5b04b436ab8c243

Sharing

Copy URL Twitter E-mail

General

Target
emu-win-release-vs26.7z
Size 12.8MB
Sample261024-yek5caff73
SHA256 417b7d348652ee9c7d2609edc921154cac2c52299975f360f5b04b436ab8c243
MD5 842b8968afc28e39d1ccbd75ff776169
SHA1 8c2fb451163eec59e64b61d4951a986e33020536
SHA512 282077890557a712929c9b791a75351f0b771b5322f06941547488c9b0b95437fb47de595849a44800b4c8dfba18e9cae73419586c075590dfd902a598af92cd
SSDEEP 393216:CJQQLBjpS75tdXUdz82RVWKIDK6uXgpyAMDwipAjZyXGAN5:CJdFjpEdC82WVDK6ulXUiaVcGAN5
TLSH
T123D633A1FD96528FC97C273A4CDD312EA51C13590A1F3C608A1DD288EA6A1F6DC572CF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Targets

- Target
  release/experimental/x64/steam_api64.dll
- Size 21.5MB
- SHA256 d718f271dd69dceabf5f128262630837dfed605f344adf67fb86bd835714c9c8
- MD5 5b870c41ed35c1888b78ee22b2ba25e7
- SHA1 e2e8ba2db617496b97e535ae91a52617bc4b9d81
- SHA512 df55e1a505ff897bdf039b32d343567b0ef56c20544d1ff12c46b329981725bdf0209511c3d848fe7f1666c02aff6f3a89d5cfdc61fffb8f667fecb6647cda38
- SSDEEP 196608:1dyWG5F3R67UE8967wciZgA72D8UQg6L3J43gELwbhsP0Vqc:LM5FP1WwcIgA72kgghsk
- TLSH
  T119375B47E7BB01E5D6B6D03895B3623BFE7174A5833097D7AA8056061F22BE0E93E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  release/experimental/x64/steamclient64.dll
- Size 108KB
- SHA256 d3b38f692448ff82819f6bf6058d25f4dd02820ab0af57d12565ae4d17fe55bc
- MD5 f17c56334dc17829b8c1b07c90e26148
- SHA1 49c98a35bffefcc48c70ee0716056be89df970d2
- SHA512 6c7ff1e27fe5c745369c9880c74a99c5b6e45a9b4a1d2fbc79c3aa8dc0b228523e06054723c14cff47ec240867a8eae357dfc2d3008498234baabab44ed23c89
- SSDEEP 3072:nuLlRfUUqLDdgUpgmlUdgAt94qZ33fb2NGsMtpDCy:OfUBfm/aUKAHpVsMt1
- TLSH
  T16EB3295776E930ABE176C2388BB33A05E776B81507609BEF0360425A1F237E0DD39B61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  release/experimental/x86/steam_api.dll
- Size 18.9MB
- SHA256 94daa15ff55fc55c9a2262c36bc4d9991fa4a35b9557940becd335fc17be68b5
- MD5 07b2473739741345df6e6033f85a5eed
- SHA1 bcf8e2577cd446ef94117552ef6d3f68b6f12195
- SHA512 5e8e55c458556558d25a1750c53de0e5ab940b222f5271e096382aac9bef295cb6cfb5a365456bd5e31eac4df3dc2203099f2132bbcf2929dc06b9d9f52ee6cc
- SSDEEP 393216:eqWOXfOYM0bncKTEbe0arVwcIgA72TOJmV:F6bKwcIgA72KS
- TLSH
  T12A17BE11E292D135FBB701F6CAFD067E5B389F602B1102DBB2C469594B66AD1FE32213
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  release/experimental/x86/steamclient.dll
- Size 90KB
- SHA256 7c015c13e9d6f1cf8d26c83ba542783482791c6e461e630c74f62a39d69e2601
- MD5 755a230d800a32965f5aca383cf32fb1
- SHA1 5e00b3394ee32d6536c6e3d033a7ed8716c879b1
- SHA512 c719a67205374b91ac397c4d721410bf138e992316db46adf84fca1b7c841bef9c8cf33459b7cdb085a0b5f056b5c69c541e4a4e668e5dadd6389432ddd88a44
- SSDEEP 1536:Ul29+6H+1lv3fzMVE/3jY+WNG1egQfHb19b7y0pI85wsW+Fcdwzv8FMCCmk7uZtP:k29+VR3fV/3ZWCegQfH/7yAI8Mw4FMCP
- TLSH
  T1DE93280075D0F175D9BED9354B38BA65CB2EB850DB90DDEB275402AA4E302C1EE31A6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  release/regular/x64/steam_api64.dll
- Size 10.7MB
- SHA256 4946d19c986aa9634c3be802a946c4e0739bcfe56669779abdc4d17a077ac273
- MD5 71a3cb3e3a5babd4f9c424e8454b4ada
- SHA1 6107a56a4a9bd2ba5f8de7ea1c0a7663b4487e6c
- SHA512 6e3304bda9fced23ca9912c3c23520a91c0ddbea54ec91bca27278f3ee15a48c1df6c45a32038062d4718ca7c5320a2394945e9bb0a667399638fae0db6d0492
- SSDEEP 98304:7h0pEpFhyS/lezSdxkm3HDGZH8eAk6435hibo0u2vo:7h0pQfeAT435hibop
- TLSH
  T1E6B6F817E7BA01E5D5FAC1788563623BFDB13495833497DB9A805A0B1B32BE4EA3D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  release/regular/x86/steam_api.dll
- Size 8.6MB
- SHA256 b392c2c0c5604cf387c0ab569f681e2b8dc587520d6e018897a64bfc7213776a
- MD5 3a8bfe7eb4880c59fb66b7ca2532682f
- SHA1 c8b74fac2c2049699e8adfff6c8908f064489348
- SHA512 ded91064cb1d6771c55089e8dd46fd18727e3c4ac2ad34d811b5ab58225d697d8c84aa233e4c242a7d1ef024901a8a2b166952383a2c3e46d89a4de5db7b32bd
- SSDEEP 196608:nrm8CR874jg4dYCobPoKR9xDuIiHtww7e/L:nd4dYCobPoKR90ww7eT
- TLSH
  T1BD969E21E2518039FAFB01FAC6FE4A7E5A7C5F602B1450DB53C8688D4A369D1BF32653
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  release/steam_old_lib/Steam.dll
- Size 160KB
- SHA256 a83e5f144d8f4c520cf6efb8c31828ee50bb96a51177ce959e1f26915d993cca
- MD5 0e09fb334a8eaf49c49850ee5bbdd259
- SHA1 7a32df745cf361a78ded18589295da3b4c4cc313
- SHA512 3be9d735cd53ec9fb9c7652e9cc05b32c96288cf9571438f5c311c0ad2bf9e3de4aa5c5c31fbe0dbb8e44ca6db4d95cb91f9337e11a90e72146283cfe02e5a4e
- SSDEEP 3072:940a8/nVS5gZC37/VXFJeljtxthnkCSJ/XexbzzmaRXpsyTqrpPrzx6A8b:940a8/nVogZY1IbJkxJ/czztZ7qrzx67
- TLSH
  T127F32A15AC4188B1DF6F087548346E16DF29AE65CBF2BAE37B500EE548346CD8F34B1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  release/steamclient_experimental/GameOverlayRenderer.dll
- Size 1.8MB
- SHA256 8eecf74af1c535f7cab42d0b0ebebfe663a551f021712c9275ca733b4a49c26e
- MD5 bd89f09ef1ea2643f8ee71e592a3c171
- SHA1 827e8f9c85da7b3e5954893fda9d308b3ee6c7f2
- SHA512 a4247ea970644aebcc27e8b7b898bfc343aca53dde799c58df618a3cd99646047cdd9bd0ece88c27378e5f4bde3837181cb59053b1b480264a5e934065bfdd46
- SSDEEP 1536:mROAdC7+LRb8NM5L7/j87NQAgQnTbuJHA0bIsWF5cdwsYRDP15dKDLFV:aOA1R8M7/CngQnTgACKowsmDP15dKDL/
- TLSH
  T1E395490036D1B136E9BED5340B74BA65EE3EBD400BA0DDEB3355D66E0E302C1E635A66
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  release/steamclient_experimental/GameOverlayRenderer64.dll
- Size 1.9MB
- SHA256 f56775ec8b3fb1120b6905e7047c1628a1dbb1055f451047cc752767294beffe
- MD5 9d630f00ee60dc7f349dea7a75aba414
- SHA1 e8f027933fff5965910a229b49f739b13041f84b
- SHA512 fe350d2b3f1024ca4748aae08a4b1c6b50e110fcaee7b283bf3191d9c2c779a2c78c74adc27eb85f9ad35e69306817ef0b93293b6fdb662dbdc392f74ca7501e
- SSDEEP 3072:KwK3mlJn3Bj9tUVUm5UINNdWzY9UXqLvjy5Jef:K+nRjjXuUcb93Luef
- TLSH
  T15495295477E930A9E576C3788BB33A07D97678150711AAEF0360025A2EE3FE2C179F61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  release/steamclient_experimental/extra_dlls/steamclient_extra_x64.dll
- Size 301KB
- SHA256 b33b6719cff495156ac4d476ad728347cd60d8ced777d1d76b7a5000fb28bad9
- MD5 b0c97b9478baf7140cff842d824397e2
- SHA1 d4a451ed0071f9075cd825bfa3265f1c53eacb6a
- SHA512 0bf6557608399bdd2d0c4ac5ed31bbc33b29327570a6593655bb2a593c3870cc2a6da0d3714165eb436d98b590d76fa61a792bc8120d12fe9124af9a575057be
- SSDEEP 6144:3JLJEpB7+n60dCxFhCY2P6QIHhfQ3bQp47WPXfW:ZJ2+nXk526lHhf48Xe
- TLSH
  T1776416017AE5A875EA36C63C8A639D09F7B2F8950791E7CB07A109DE0E137D8CD39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  release/steamclient_experimental/extra_dlls/steamclient_extra_x86.dll
- Size 251KB
- SHA256 9b638e7281bf3a4d57e86c5fa23179e65712d1af52f64c675df640acb4caf370
- MD5 3c31065a27f0b7f086c1a62a0f1264de
- SHA1 234453c636448947436259305f7e04884d0d139a
- SHA512 a9d870cd9c1d6964c5bb7017eb552b95aa91146c0f782fe1835f7d85f87d730c8e4d88e3d6dc66e26482fcfa25043765977d061c7c82a9972c69be1427390ea2
- SSDEEP 6144:1rihhHtcSdNrW/Lbrqh0xwAHTWcpTJ/JJdW:1ri/NZN6LSQHbJ/JJdW
- TLSH
  T1F8444A42B8C2A031DD9D98348B39BA6AD52EA9514BF6D4C773800EEB5D321CDCE35F46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  release/steamclient_experimental/steamclient.dll
- Size 18.7MB
- SHA256 19dc678ed866be8ef8458f2be914d8481cddae8ebd60a7e9e24b9af4a65c9994
- MD5 fd4295b63744996cbe73e83af5799748
- SHA1 81e277d3a4e2b3b0d44aabde3284b2c9cb1683e2
- SHA512 0aeb877db2976f0dcb0712b613bc4a3dace69466bece3a3a47246a6d644dcc22c00ae3d7d4738f71e222b6487babef69f7bf06a39bb072becc2ab7cc1363e3ef
- SSDEEP 196608:vJMJl6vJNjOJ9CmhzY9G81L8TYveb9OK42MoCa99uIZfr7wciZgA72D8UN1JNm:7gYv8TYveb9OK4toAIZHwcIgA72x1JNm
- TLSH
  T18817BE12E252D139FBB701F68AFE067E5B3C9F601B1402D772C4694D8A66AD1FE32613
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  release/steamclient_experimental/steamclient64.dll
- Size 21.4MB
- SHA256 163ebee5412c4605408cb09b32fe83383c39b1874dce98e22035a905067927d5
- MD5 fe980883add0ac8fbe5c8f29e9fa388c
- SHA1 ec76c8e245507815340a09b23715142cefdb9c44
- SHA512 381c6292330e281b12eb9869dc6df156be8aca3afe56aa0b26f7d7fcb17c5d8c236c9952a07cc0b13f4c4cc2b79c955d3be4ee779c1a594e6bd8d58cf752f4ef
- SSDEEP 196608:3qQ0S6mNrJK8zAZIH7wciZgA72D8U2MvD:PamNDzbwcIgA72yMvD
- TLSH
  T177375B07E7BB11E5D6B6D03895B3623BFE7174A5833097D7A680560A1F62BE0E93E700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  release/steamclient_experimental/steamclient_loader_x64.exe
- Size 349KB
- SHA256 7499dac4d9e1c15ab199aeb2f4a785d7727b3fb8702deb214cda52ba034e5d01
- MD5 fb039512533f71ada4bddd706ba1ce1a
- SHA1 ce7a9b6d5218d78929a160f8f8ef0302f3cef23c
- SHA512 6641289dcbc2090c3d0d7187452c64f5f965781d78f648aab545deba6dc75fc245fb6b51195b63a9336baae4b1361ca0957c93311cd1901e84e282690e4ef016
- SSDEEP 6144:J1jkzfDzE/daxAM+JE3j1gNpMF+5HxFPcE+f5zMzpnz1UzAIUcnEbQK:/n0xAVi3Jg3M+1/0E+c5
- TLSH
  T10E747D26EBA414F9E277C17CCD524901EA73BC494771AACF23904AA72F276D48E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  release/steamclient_experimental/steamclient_loader_x86.exe
- Size 289KB
- SHA256 a9e363fa9df076163bfbf6bd12bb50b4390cc9cf5957e70e27f2178f9f974483
- MD5 dedcf4c2335a5a03d62390b6bf28632b
- SHA1 d899918f56c56ac797e38c6febdaf8e06fa34376
- SHA512 908e5f6fb0e6bc80159ba9fb7ab18e5435ff8ce5de3f463cb4fb32eeeab6e1d0026d4560442ceb89717d4839bed26bac57ed4d7fec0ff3ae3e5893138386feb6
- SSDEEP 6144:uVCpiy2YWq+nUW0rypX+baGFmJI0W8HEaMKKRbEGJkbrOUO31r:uVCpfi8rypX+baGFmJ/HjlHG
- TLSH
  T1B1547E10B641C032DA6205729979DF76893EACA04F6455CBB3C45EFEDA346C27B38F4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  release/tools/generate_interfaces/generate_interfaces_x64.exe
- Size 294KB
- SHA256 6e9ba4c6841e19b3958fa131f5540a6a5f2cde873a034cb8ec948884a2186e8e
- MD5 9dbf956db7ee990c6ef5c02758dba245
- SHA1 23ee555c3ae3089e1c55c971c927d0a4a29859f9
- SHA512 3e3ac8202d3e04b0cacf79f919479b88d8c5015c5fd4dd724803dcc41eb65bc30236626dde1c4c907e1d1422179a40249c65f8f4afda7bfaf908db2e730eace5
- SSDEEP 6144:0dcRkGqTwKu/HxIWXR5ljSL/gmns0YL9d36E+O7I:hRkGPKufeWBLohpYZdxI
- TLSH
  T167546C1AB7A814F9ED67C57CC9420606DB72B8164761EBCF03904B972F13AE49E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32