IOC Report
Setup-Premium.exe

loading gif

Processes

Path
Cmdline
Malicious
C:\Users\user\Desktop\Setup-Premium.exe
"C:\Users\user\Desktop\Setup-Premium.exe"
 malicious
C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe
"C:\Windows\BitLockerDiscoveryVolumeContents\BitLockerToGo.exe"
 malicious

URLs

Name
IP
Malicious
enlargkiw.sbs
malicious
allocatinow.sbs
malicious
drawwyobstacw.sbs
malicious
mathcucom.sbs
malicious
https://steamcommunity.com/profiles/76561199724331900
104.102.49.254
 malicious
https://vennurviot.sbs/api
172.67.140.193
 malicious
https://steamcommunity.com/profiles/76561199724331900/inventory/
unknown
 malicious
ehticsprocw.sbs
malicious
condifendteu.sbs
malicious
https://drawwyobstacw.sbs/api
188.114.96.3
 malicious
https://resinedyw.sbs/api
172.67.205.156
 malicious
https://mathcucom.sbs/api
188.114.96.3
 malicious
resinedyw.sbs
malicious
vennurviot.sbs
malicious
https://www.cloudflare.com/learning/access-management/phishing-attack/
unknown
https://community.akamai.steamstatic.com/public/shared/javascript/auth_refresh.js?v=WgUxSlKTb3W1&amp
unknown
https://steamcommunity.com/?subsection=broadcasts
unknown
https://sergei-esenin.com/
unknown
https://store.steampowered.com/subscriber_agreement/
unknown
https://community.akamai.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6
unknown
https://github.com/zitadel/zitadel/blob/new-eventstore/cmd/zitadel/startup.yaml.
unknown
http://www.valvesoftware.com/legal.htm
unknown
https://community.akamai.steamstatic.com/public/css/promo/summer2017/stickers.css?v=HA2Yr5oy3FFG&amp
unknown
https://community.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
unknown
https://community.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
unknown
http://json-schema.org/draft-04/schema#/properties/maximum
unknown
https://community.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=sHIIcMzCffX6&
unknown
http://json-schema.org/draft-04/schema#/properties/title
unknown
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
unknown
https://community.akamai.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=OeNIgrpEF8tL
unknown
http://swagger.io/v2/schema.json#
unknown
https://community.akamai.steamstatic.com/public/javascript/applications/community/manifest.js?v=hgPi
unknown
https://drawwyobstacw.sbs/ht
unknown
https://steamcommunity.com/m
unknown
http://json-schema.org/draft-04/schema#/properties/default
unknown
https://community.akamai.steamstatic.com/public/css/skin_1/header.css?v=NFoCa4OkAxRb&l=english
unknown
http://json-schema.org/draft-04/schema#/definitions/positiveInteger
unknown
http://json-schema.org/draft-04/schema#/properties/uniqueItems
unknown
http://store.steampowered.com/privacy_agreement/
unknown
https://store.steampowered.com/points/shop/
unknown
https://gorm.io/docs/hooks.htmlWarning:
unknown
http://json-schema.org/draft-04/schema#/properties/pattern
unknown
https://avatars.akamai.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
unknown
https://store.steampowered.com/privacy_agreement/
unknown
https://www.cloudflare.com/learning/access-manag
unknown
https://www.cloudflare.com/5xx-error-landing
unknown
https://community.akamai.steamstatic.com/public/shared/css/shared_global.css?v=ezWS9te9Zwm9&l=en
unknown
https://community.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
unknown
https://community.akamai.steamstatic.com/public/css/applications/community/main.css?v=2Ih2WOq7ErXY&a
unknown
https://mathcucom.sbs/
unknown
https://community.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&am
unknown
https://community.akamai.steamstatic.com/public/css/globalv2.css?v=PAcV2zMBzzSV&l=english
unknown
https://community.akamai.steamstatic.com/public/javascript/modalv2.js?v=dfMhuy-Lrpyo&l=english
unknown
https://community.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
unknown
https://avatars.akamai.steamstatic
unknown
https://ehticsprocw.sbs/
unknown
https://community.akamai.steamstatic.com/public/css/skin_1/profilev2.css?v=M_qL4gO2sKII&l=englis
unknown
https://community.akamai.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=.isFTSRckeNhC
unknown
https://store.steampowered.com/about/
unknown
https://steamcommunity.com/my/wishlist/
unknown
http://html4/loose.dtd
unknown
https://community.akamai.steamstatic.com/public/javascript/global.js?v=9OzcxMXbaV84&l=english
unknown
https://index.docker.io/v1/input
unknown
https://help.steampowered.com/en/
unknown
https://steamcommunity.com/market/
unknown
https://store.steampowered.com/news/
unknown
http://json-schema.org/draft-04/schema#/properties/exclusiveMaximum
unknown
https://ehticsprocw.sbs/M
unknown
http://json-schema.org/draft-04/schema#/properties/description
unknown
https://sergei-esenin.com/apiM
unknown
http://store.steampowered.com/subscriber_agreement/
unknown
https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
unknown
http://.css
unknown
http://json-schema.org/draft-04/schema#/properties/enum
unknown
https://community.akamai.steamstatic.com/public/css/skin_1/modalContent.css?v=.VpiwkLAYt9r1
unknown
https://community.akamai.steamstatic.com/public/javascript/promo/stickers.js?v=upl9NJ5D2xkP&l=en
unknown
https://sergei-esenin.com/-
unknown
https://steamcommunity.com/discussions/
unknown
http://json-schema.org/draft-04/schema#/definitions/stringArray
unknown
https://sergei-esenin.com/%
unknown
https://store.steampowered.com/stats/
unknown
https://vennurviot.sbs/apii
unknown
https://community.akamai.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
unknown
https://store.steampowered.com/steam_refunds/
unknown
https://steamcommunity.com/E
unknown
https://steamcommunity.com/login/home/?goto=profiles%2F76561199724331900
unknown
http://json-schema.org/draft-04/schema#/properties/minimum
unknown
https://community.akamai.steamstatic.com/public/javascript/webui/clientcom.js?v=jGtzAgjYROne&l=e
unknown
http://json-schema.org/draft-04/schema#/properties/exclusiveMinimum
unknown
http://json-schema.org/draft-04/schema#
unknown
https://steamcommunity.com/workshop/
unknown
https://store.steampowered.com/legal/
unknown
http://.jpg
unknown
https://community.akamai.steamstatic.com/public/javascript/reportedcontent.js?v=dAtjbcZMWhSe&l=e
unknown
http://json-schema.org/draft-04/schema#/definitions/positiveIntegerDefault0
unknown
https://community.akamai.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=pSv
unknown
https://community.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=-DH0xTYpnVe2&l=engl
unknown
https://www.cloudflare.com/learning/access-managy
unknown
https://store.steampowered.com/
unknown
https://community.akamai.steamstatic.com/public/javascript/prototype-1.7.js?v=.55t44gwuwgvw
unknown
There are 90 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
condifendteu.sbs
104.21.79.35
 malicious
steamcommunity.com
104.102.49.254
 malicious
vennurviot.sbs
172.67.140.193
 malicious
drawwyobstacw.sbs
188.114.96.3
 malicious
mathcucom.sbs
188.114.96.3
 malicious
proclaimykn.buzz
188.114.96.3
 malicious
sergei-esenin.com
104.21.53.8
 malicious
ehticsprocw.sbs
172.67.173.224
 malicious
resinedyw.sbs
172.67.205.156
 malicious
enlargkiw.sbs
172.67.152.13
 malicious
allocatinow.sbs
unknown
 malicious
There are 1 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
104.21.53.8
sergei-esenin.com
United States
malicious
172.67.173.224
ehticsprocw.sbs
United States
malicious
188.114.96.3
drawwyobstacw.sbs
European Union
malicious
172.67.152.13
enlargkiw.sbs
United States
malicious
104.102.49.254
steamcommunity.com
United States
malicious
172.67.205.156
resinedyw.sbs
United States
malicious
172.67.140.193
vennurviot.sbs
United States
malicious
104.21.79.35
condifendteu.sbs
United States
malicious

Memdumps

Base Address
Regiontype
Protect
Malicious
2800000
direct allocation
page read and write
 malicious
29BF000
direct allocation
page read and write
 malicious
400000
remote allocation
page execute and read and write
 malicious
2584000
direct allocation
page read and write
24F2000
direct allocation
page read and write
26E4000
direct allocation
page read and write
2F74000
heap
page read and write
260E000
direct allocation
page read and write
51FF000
stack
page read and write
5490000
trusted library allocation
page read and write
2594000
direct allocation
page read and write
2480000
direct allocation
page read and write
2432000
direct allocation
page read and write
53AE000
stack
page read and write
2602000
direct allocation
page read and write
2616000
direct allocation
page read and write
197F000
unkown
page read and write
22980000
heap
page read and write
2F79000
heap
page read and write
18A3000
unkown
page write copy
25F8000
direct allocation
page read and write
227FF000
stack
page read and write
2F91000
heap
page read and write
193C000
unkown
page write copy
2610000
direct allocation
page read and write
2618000
direct allocation
page read and write
2490000
direct allocation
page read and write
2EF9000
heap
page read and write
533E000
stack
page read and write
2786000
direct allocation
page read and write
2712000
direct allocation
page read and write
297A000
direct allocation
page read and write
1F20000
heap
page read and write
24A2000
direct allocation
page read and write
22B2F000
stack
page read and write
2600000
direct allocation
page read and write
249A000
direct allocation
page read and write
24F0000
direct allocation
page read and write
2460000
direct allocation
page read and write
2772000
direct allocation
page read and write
26F8000
direct allocation
page read and write
2626000
direct allocation
page read and write
1BAD000
stack
page read and write
2FC3000
heap
page read and write
2612000
direct allocation
page read and write
18AD000
unkown
page write copy
451000
unkown
page execute read
2F2B000
heap
page read and write
2FAA000
heap
page read and write
2440000
direct allocation
page read and write
2FC7000
heap
page read and write
254E000
direct allocation
page read and write
2F72000
heap
page read and write
2758000
direct allocation
page read and write
22947000
direct allocation
page read and write
271A000
direct allocation
page read and write
E5E000
unkown
page readonly
24D6000
direct allocation
page read and write
2506000
direct allocation
page read and write
2F73000
heap
page read and write
2EC0000
heap
page read and write
229B4000
direct allocation
page read and write
2498000
direct allocation
page read and write
2F72000
heap
page read and write
2F12000
heap
page read and write
4A80000
heap
page read and write
2FBC000
heap
page read and write
23ED000
stack
page read and write
22945000
direct allocation
page read and write
2570000
direct allocation
page read and write
2530000
direct allocation
page read and write
2F3F000
heap
page read and write
2543000
direct allocation
page read and write
2EF4000
heap
page read and write
194C000
unkown
page write copy
278A000
direct allocation
page read and write
23F0000
heap
page read and write
2708000
direct allocation
page read and write
22A2D000
stack
page read and write
2714000
direct allocation
page read and write
4D50000
remote allocation
page read and write
2702000
direct allocation
page read and write
271C000
direct allocation
page read and write
26F2000
direct allocation
page read and write
4D50000
remote allocation
page read and write
24D2000
direct allocation
page read and write
2F6B000
heap
page read and write
198F000
unkown
page write copy
254C000
direct allocation
page read and write
260A000
direct allocation
page read and write
255C000
direct allocation
page read and write
27A4000
direct allocation
page read and write
2512000
direct allocation
page read and write
297C000
direct allocation
page read and write
1990000
unkown
page readonly
26FE000
direct allocation
page read and write
26E0000
direct allocation
page read and write
2716000
direct allocation
page read and write
2680000
direct allocation
page read and write
229E0000
direct allocation
page read and write
2EFE000
heap
page read and write
2550000
direct allocation
page read and write
2554000
direct allocation
page read and write
1A16000
unkown
page readonly
2696000
direct allocation
page read and write
450000
unkown
page readonly
2FB1000
heap
page read and write
1F2C000
heap
page read and write
2F80000
heap
page read and write
1E10000
heap
page read and write
26F4000
direct allocation
page read and write
24D4000
direct allocation
page read and write
224FF000
stack
page read and write
4C20000
heap
page read and write
2526000
direct allocation
page read and write
247C000
direct allocation
page read and write
2F28000
heap
page read and write
2283D000
stack
page read and write
229A0000
direct allocation
page read and write
2782000
direct allocation
page read and write
24CC000
direct allocation
page read and write
2FCA000
heap
page read and write
2400000
direct allocation
page read and write
2592000
direct allocation
page read and write
2E50000
heap
page read and write
24FE000
direct allocation
page read and write
4BDD000
stack
page read and write
2794000
direct allocation
page read and write
262C000
direct allocation
page read and write
451000
unkown
page execute read
26E8000
direct allocation
page read and write
2F89000
heap
page read and write
2FBE000
heap
page read and write
24D8000
direct allocation
page read and write
2718000
direct allocation
page read and write
2F3F000
heap
page read and write
2FAF000
heap
page read and write
18B1000
unkown
page read and write
2BAB000
stack
page read and write
2442000
direct allocation
page read and write
2EEC000
heap
page read and write
2784000
direct allocation
page read and write
2F20000
heap
page read and write
26F0000
direct allocation
page read and write
2614000
direct allocation
page read and write
2ED0000
heap
page read and write
2F96000
heap
page read and write
E51000
unkown
page execute read
2540000
direct allocation
page read and write
2476000
direct allocation
page read and write
229A5000
direct allocation
page read and write
252A000
direct allocation
page read and write
26CA000
direct allocation
page read and write
2606000
direct allocation
page read and write
2293F000
stack
page read and write
2710000
direct allocation
page read and write
2F20000
heap
page read and write
4C1D000
stack
page read and write
2FAA000
heap
page read and write
32DE000
stack
page read and write
2FC7000
heap
page read and write
1E60000
direct allocation
page read and write
193D000
unkown
page read and write
2F70000
heap
page read and write
25F2000
direct allocation
page read and write
2632000
direct allocation
page read and write
269A000
direct allocation
page read and write
272A000
direct allocation
page read and write
2604000
direct allocation
page read and write
2546000
direct allocation
page read and write
1EC0000
direct allocation
page read and write
2EA0000
heap
page read and write
24FA000
direct allocation
page read and write
18A3000
unkown
page write copy
2F8B000
heap
page read and write
2704000
direct allocation
page read and write
24E0000
direct allocation
page read and write
277E000
direct allocation
page read and write
251A000
direct allocation
page read and write
24E4000
direct allocation
page read and write
2BEB000
stack
page read and write
24DA000
direct allocation
page read and write
26D4000
direct allocation
page read and write
270E000
direct allocation
page read and write
251C000
direct allocation
page read and write
246A000
direct allocation
page read and write
22949000
direct allocation
page read and write
194D000
unkown
page read and write
1939000
unkown
page read and write
2F28000
heap
page read and write
2408000
direct allocation
page read and write
20F0000
direct allocation
page read and write
31DE000
stack
page read and write
24B2000
direct allocation
page read and write
23AD000
stack
page read and write
2FA9000
heap
page read and write
1AAC000
stack
page read and write
197A000
unkown
page read and write
278C000
direct allocation
page read and write
185E000
unkown
page readonly
2564000
direct allocation
page read and write
2420000
direct allocation
page read and write
4D2D000
stack
page read and write
50FE000
stack
page read and write
2552000
direct allocation
page read and write
2FAA000
heap
page read and write
4D50000
remote allocation
page read and write
269C000
direct allocation
page read and write
27A6000
direct allocation
page read and write
256C000
direct allocation
page read and write
22958000
direct allocation
page read and write
2F7B000
heap
page read and write
2451000
direct allocation
page read and write
1F1E000
stack
page read and write
18B2000
unkown
page write copy
2528000
direct allocation
page read and write
E51000
unkown
page execute read
198F000
unkown
page write copy
2E9E000
stack
page read and write
2510000
direct allocation
page read and write
2482000
direct allocation
page read and write
25EC000
direct allocation
page read and write
185E000
unkown
page readonly
2572000
direct allocation
page read and write
523D000
stack
page read and write
24E2000
direct allocation
page read and write
4ADD000
stack
page read and write
2ED8000
heap
page read and write
2F20000
heap
page read and write
2EC5000
heap
page read and write
1990000
unkown
page readonly
22CF0000
direct allocation
page read and write
2412000
direct allocation
page read and write
1962000
unkown
page read and write
319F000
stack
page read and write
18A5000
unkown
page read and write
E5E000
unkown
page readonly
2EF9000
heap
page read and write
458000
remote allocation
page execute and read and write
1E55000
heap
page read and write
26EA000
direct allocation
page read and write
451000
unkown
page execute read
226FF000
stack
page read and write
24E8000
direct allocation
page read and write
25EA000
direct allocation
page read and write
24CE000
direct allocation
page read and write
255A000
direct allocation
page read and write
225FF000
stack
page read and write
2534000
direct allocation
page read and write
261B000
direct allocation
page read and write
2728000
direct allocation
page read and write
236D000
stack
page read and write
2EFE000
heap
page read and write
25FC000
direct allocation
page read and write
2486000
direct allocation
page read and write
2484000
direct allocation
page read and write
450000
unkown
page readonly
2EFE000
heap
page read and write
2578000
direct allocation
page read and write
5480000
heap
page read and write
2F8A000
heap
page read and write
53EF000
stack
page read and write
1E50000
heap
page read and write
2F89000
heap
page read and write
2748000
direct allocation
page read and write
2F12000
heap
page read and write
1ED0000
direct allocation
page read and write
2500000
direct allocation
page read and write
1A16000
unkown
page readonly
2F12000
heap
page read and write
1E68000
direct allocation
page read and write
There are 261 hidden memdumps, click here to show them.