Files named steam.exe

82.174.228.250 · steam.exe

/0 Yara's Macbook homefolder/0 Yara's Macbook homefolder/0 Yara's Macbook homefolder/0 Yara's Macbook homefolder/0 Yara's Macbook homefolder/0 Yara's Macbook homefolder/Macintosh HD/Schala op DAAN/Program Files (x86)/Steam/

The Netherlands · Odido Netherlands B.V.

SHA1: 558403043f0288aba3d9a43e9dfa7e109bc0b31a
SHA256: 88eb0e145502e84cfb242b4733eeecbda53f78e33fe748f3c0e1fb14edbd7cd4
application/x-msdownload
4.18MB
2024-03-06 20:33:20 +0000 UTC
switch.hexzo.com · steam.exe

/Steam/steamapps/compatdata/1493710/pfx/dosdevices/c:/windows/syswow64/

Canada · SHAW

SHA1: f2c542078f19cf44c3232443d5047d9c5eb5ceeb
SHA256: f96314240d426b4fd552b5b414cfa812327001f89064ea5677b4c3e950ae77d7
application/octet-stream
12.00KB
2024-04-27 22:54:27 +0000 UTC
switch.hexzo.com · steam.exe

/Steam/steamapps/compatdata/1493710/pfx/dosdevices/c:/windows/system32/

Canada · SHAW

SHA1: a6a47d0e074db9909744b14e1ec63de27c2a7adc
SHA256: 00e01c37f2d3df06e5468e03fdff418fc10664cdb9f20c095a5ca711479cdab1
application/octet-stream
12.00KB
2024-04-27 22:54:26 +0000 UTC
switch.hexzo.com · steam.exe

/Steam/steamapps/compatdata/1493710/pfx/dosdevices/c:/Program Files (x86)/Steam/

Canada · SHAW

SHA1: c435349a807bf5f85390a8cd6fc6826414c59f87
SHA256: a12c6c9ed617bf7c804227cb494666487c9d185daf61940af498980f6937387e
application/octet-stream
2.68MB
2024-04-27 22:54:53 +0000 UTC
switch.hexzo.com · steam.exe

/Steam/steamapps/common/Proton - Experimental/files/share/default_pfx/drive_c/windows/syswow64/

Canada · SHAW

SHA1: f2c542078f19cf44c3232443d5047d9c5eb5ceeb
SHA256: f96314240d426b4fd552b5b414cfa812327001f89064ea5677b4c3e950ae77d7
application/octet-stream
12.00KB
2024-04-27 22:54:27 +0000 UTC
switch.hexzo.com · steam.exe

/Steam/steamapps/common/Proton - Experimental/files/share/default_pfx/drive_c/windows/system32/

Canada · SHAW

SHA1: a6a47d0e074db9909744b14e1ec63de27c2a7adc
SHA256: 00e01c37f2d3df06e5468e03fdff418fc10664cdb9f20c095a5ca711479cdab1
application/octet-stream
12.00KB
2024-04-27 22:54:26 +0000 UTC
switch.hexzo.com · steam.exe

/Steam/steamapps/common/Proton - Experimental/files/lib64/wine/x86_64-windows/

Canada · SHAW

SHA1: a6a47d0e074db9909744b14e1ec63de27c2a7adc
SHA256: 00e01c37f2d3df06e5468e03fdff418fc10664cdb9f20c095a5ca711479cdab1
application/octet-stream
12.00KB
2024-04-27 22:54:26 +0000 UTC
switch.hexzo.com · steam.exe

/Steam/steamapps/common/Proton - Experimental/files/lib/wine/i386-windows/

Canada · SHAW

SHA1: f2c542078f19cf44c3232443d5047d9c5eb5ceeb
SHA256: f96314240d426b4fd552b5b414cfa812327001f89064ea5677b4c3e950ae77d7
application/octet-stream
12.00KB
2024-04-27 22:54:27 +0000 UTC
217.28.220.110 · steam.exe

/testart/Logitech G HUB/

Russia · JSC IOT

SHA1: 0a5c8b02b37ec764ebbea8db2570ff68f9625b1e
SHA256: 64ac6e66d46b11cda0ea9c28d83125f3b75729eac415349c3252620486738824
application/octet-stream
89.50KB
2024-04-22 12:58:27 +0000 UTC
217.28.220.110 · steam.exe

/syns/rus/

Russia · JSC IOT

SHA1: 1c026c76d2c9e12e84b03b2a667821e6f751f203
SHA256: 337631be580ec3e7cda0665ea53bedefde6f6dc7e88c4b784314d5b206647435
application/octet-stream
252.93MB
2024-04-29 15:11:27 +0000 UTC
217.28.220.110 · steam.exe

/syns/mmm/

Russia · JSC IOT

SHA1: df65e5471577c60cf90a42047767ec7b7f45d549
SHA256: d3cf27d9de18f95441fe8a10efe75ce4b34e0b742116ee0af46440b420d73f5b
application/octet-stream
252.94MB
2024-05-01 14:39:27 +0000 UTC
217.28.220.110 · steam.exe

/syns/den/

Russia · JSC IOT

SHA1: c50cbfd7c5c3c580215e4f35e6a18dbb8fab7bac
SHA256: 61718e3b0c9ab2fe36242e1f718ce5ca07f725955bb4a25fd774401962c3f1da
application/octet-stream
156.25MB
2024-05-19 13:45:02 +0000 UTC
217.28.220.110 · steam.exe

/syns/danrr/

Russia · JSC IOT

SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
application/octet-stream
0.00B
2024-07-13 18:50:58 +0000 UTC
217.28.220.110 · steam.exe

/syns/dan/

Russia · JSC IOT

SHA1: 6c266fc5f58142059086a7eaa3d6727bea9ad96f
SHA256: f1519ca1ea5e32dc1affc3ebfdf74f1b10b47b9d8a7613ecab4407b973d597df
application/octet-stream
405.01MB
2024-06-29 18:05:06 +0000 UTC
217.28.220.110 · steam.exe

/syns/art/

Russia · JSC IOT

SHA1: 47f369e48bd288dbe187911b4941f73bf077acca
SHA256: dd9dc12c5968aae10debec9badf710eb6c9eaa0baa6152ed5db219ce21017fa5
application/octet-stream
252.93MB
2024-04-29 15:11:27 +0000 UTC
217.28.220.110 · steam.exe

/rus/

Russia · JSC IOT

Yara INDICATOR_EXE_DotNET_Encrypted From AlienVault by ditekSHen

SHA1: 6353986b9ff80e28fc37bf5dc472d70c6a023035
SHA256: 04a66e5e13b5376f71d28bf4e65b35933901c1a64fd52a8273e036c3c665d280
application/octet-stream
139.07MB
2024-04-22 12:58:26 +0000 UTC
217.28.220.110 · steam.exe

/olga/Logitech G HUB/

Russia · JSC IOT

SHA1: 0a5c8b02b37ec764ebbea8db2570ff68f9625b1e
SHA256: 64ac6e66d46b11cda0ea9c28d83125f3b75729eac415349c3252620486738824
application/octet-stream
89.50KB
2024-04-22 12:58:25 +0000 UTC
217.28.220.110 · steam.exe

/lomen/

Russia · JSC IOT

Yara APT_Cloaked_PsExec From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 6658d967c6ebee46c4e806bc42603c9fdcafb2fd
SHA256: 17d0f72026c45380b80c499d7d8f4f542bc7ef7948511a32cf6bc446e97ce45d
application/octet-stream
9.00MB
2024-04-22 12:58:25 +0000 UTC
217.28.220.110 · steam.exe

/lolme/Logitech G HUB/

Russia · JSC IOT

SHA1: 0a5c8b02b37ec764ebbea8db2570ff68f9625b1e
SHA256: 64ac6e66d46b11cda0ea9c28d83125f3b75729eac415349c3252620486738824
application/octet-stream
89.50KB
2024-04-22 12:58:25 +0000 UTC
217.28.220.110 · steam.exe

/atmn/

Russia · JSC IOT

Yara APT_Cloaked_PsExec From Florian Roth by Florian Roth (Nextron Systems)

Download archived sample
The password is "infected"

SHA1: 38b7bfc7d4de6f74d827681c95a39779c45d218f
SHA256: dc5e2f5ca9764883aa794d725e85c0e5a1a163be59c3f0e27949b4b9976b4626
application/octet-stream
9.00MB
2024-04-22 12:58:25 +0000 UTC