Overview

overview

7

Static

static

1

steam_appid.txt

windows10-2004-x64

7

Resubmissions

13-10-2023 23:39

231013-3njebsgh23 7

13-10-2023 23:33

231013-3jzwhsgg73 6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    steam_appid.txt

  • Size

    7B

  • Sample

    231013-3njebsgh23

  • MD5

    5f62f86ea8d73ea50ccfbd23a2de64d4

  • SHA1

    b5fad218868428794a8e9e6ad2f2982e79d00309

  • SHA256

    64958959324fadb7b0ef58c89464bf652f00fd2c01e3301dae2514e41865203d

  • SHA512

    cfdf8691a13c19a7efccc5ea300e114bf309fbe8db37c2406d48d4b1354780ccd6d78e988d9589b604c7a61e6da201af8c685b4e571ec6f5ccb9de2756be25d4

Score
7/10
discoveryupx

Malware Config

Targets

    • Target

      steam_appid.txt

    • Size

      7B

    • MD5

      5f62f86ea8d73ea50ccfbd23a2de64d4

    • SHA1

      b5fad218868428794a8e9e6ad2f2982e79d00309

    • SHA256

      64958959324fadb7b0ef58c89464bf652f00fd2c01e3301dae2514e41865203d

    • SHA512

      cfdf8691a13c19a7efccc5ea300e114bf309fbe8db37c2406d48d4b1354780ccd6d78e988d9589b604c7a61e6da201af8c685b4e571ec6f5ccb9de2756be25d4

    Score
    7/10
    discoveryupx

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks