Resubmissions

03-04-2024 14:55

240403-sah7aseh92 10

03-04-2024 14:47

240403-r5t2lseh44 10

General

  • Target

    https://steamcommunivy.com/gift/7656685934763976

  • Sample

    240403-sah7aseh92

Malware Config

Targets

    • Target

      https://steamcommunivy.com/gift/7656685934763976

    • Changes its process name

    • Reads user data of web browsers

      Reads stored browser data which can include saved credentials.

    • Checks CPU configuration

      Checks CPU information which indicate if the system is a virtual machine.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Reads CPU attributes

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Virtualization/Sandbox Evasion

1
T1497

Discovery

Virtualization/Sandbox Evasion

1
T1497

System Information Discovery

3
T1082

Query Registry

2
T1012

Tasks