home

steamreaper_builder_2.3.1.exe

SteamRepear_Builder

SteamReaper

The application steamreaper_builder_2.3.1.exe, “SteamReaper builder” has been detected as a potentially unwanted program by 27 anti-malware scanners. The file has been seen being downloaded from download1422.mediafire.com.
Publisher:
SteamReaper

Product:
SteamRepear_Builder

Description:
SteamReaper builder

Version:
2.0

MD5:
6578ebed6852244fceac52c0504a48b9

SHA-1:
6b39537fb2c9cf3b7244087254c73dc1d4d20a38

SHA-256:
a283cca7a3542bff17c08128337e1222f73da2ad2421cb024afde8a200ab20cf

Scanner detections:
27 / 68

Status:
Potentially unwanted

Analysis date:
5/9/2024 10:58:20 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Kazy.568531
584

Agnitum Outpost
Trojan.Stimilik
7.1.1

Avira AntiVirus
TR/Dropper.MSIL.133999
8.3.1.6

Arcabit
Trojan.Kazy.D8ACD3
1.0.0.425

avast!
Win32:Malware-gen
2014.9-150630

AVG
MSIL7
2016.0.3062

Baidu Antivirus
Adware.Win32.Agent
4.0.3.15630

Bitdefender
Gen:Variant.Kazy.568531
1.0.20.905

Comodo Security
UnclassifiedMalware
22372

Emsisoft Anti-Malware
Gen:Variant.Kazy.568531
8.15.06.30.10

ESET NOD32
MSIL/Stimilik.GA (variant)
9.11748

Fortinet FortiGate
MSIL/Stimilik.GA!tr
6/30/2015

F-Secure
Gen:Variant.Kazy.568531
11.2015-30-06_3

G Data
Gen:Variant.Kazy.568531
15.6.25

IKARUS anti.virus
Trojan.MSIL.Stimilik
t3scan.1.9.5.0

K7 AntiVirus
Trojan
13.204.16151

Kaspersky
UDS:DangerousObject.Multi.Generic
14.0.0.1805

McAfee
Artemis!6578EBED6852
5600.6718

Microsoft Security Essentials
Trojan:MSIL/Stimilini.I
1.1.11701.0

MicroWorld eScan
Gen:Variant.Kazy.568531
16.0.0.543

Panda Antivirus
Trj/CI.A
15.06.30.10

Qihoo 360 Security
HEUR/QVM03.0.Malware.Gen
1.0.0.1015

Quick Heal
Trojan.Stimilini.g3
6.15.14.00

Sophos
Mal/Generic-S
4.98

Trend Micro House Call
TROJ_GEN.R0C1C0DDL15
7.2.181

Trend Micro
TROJ_GEN.R0C1C0DDL15
10.465.30

VIPRE Antivirus
Trojan.Win32.Generic
40914

File size:
1.5 MB (1,579,520 bytes)

Product version:
2.0

Copyright:
SteamReaper

Original file name:
SteamRepear_Builder

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\steamreaper_builder_2.3.1.exe

File PE Metadata
Compilation timestamp:
3/2/2015 10:27:58 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:eQEx/+S4EZ0DgCwFCIOJUU0EgPoQrm7iLs7iLs7iLs7iL:QF0zg3W7Nasasasa

Entry address:
0x622CE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.0959

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
385 KB (394,240 bytes)

The file steamreaper_builder_2.3.1.exe has been seen being distributed by the following URL.

http://download1422.mediafire.com/nowd1lu2ineg/.../SteamReaper_Builder_2.3.1.exe

Remove steamreaper_builder_2.3.1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.