General

  • Target
    SecuriteInfo.com.Trojan.PWS.Steam.18359.22695.22959
  • Size 729KB
  • Sample200801-6feys3e6a6
  • SHA256 3e3ab416abadd9093b15f9dcce92f3530709aba8addff16a74e89bd3a7bfd8fd
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Targets

    • Target
      SecuriteInfo.com.Trojan.PWS.Steam.18359.22695.22959
    • Size 729KB
    • SHA256 3e3ab416abadd9093b15f9dcce92f3530709aba8addff16a74e89bd3a7bfd8fd
    • MD5 SHA1 SHA512
    Score
    10/10
    • Suspicious use of NtCreateProcessExOtherParentProcess

    • ServiceHost packer

      Detects ServiceHost packer used for .NET malware

    • Executes dropped EXE

MITRE ATT&CK Enterprise v6

Tasks