Overview

overview

10

Static

static

1

6ee2fd3994...79.exe

windows7-x64

10

6ee2fd3994...79.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6ee2fd3994acdbb9a1b1680ccd3ac4b7dcb077b30b44c8677252202a03dccf79

  • Size

    549KB

  • Sample

    240410-nxlhqaee46

  • MD5

    d3d15e62d61981e85ae81ad54bd23b40

  • SHA1

    053d987ff528964bf18ffc1898acd678b8917dd7

  • SHA256

    6ee2fd3994acdbb9a1b1680ccd3ac4b7dcb077b30b44c8677252202a03dccf79

  • SHA512

    e3aded35c8474602e7ec556efdf2626a4d58f1b031c1eedbaf0f0c017c33eed607d3913138af52e8c8e408b75533a0e7ed4a5c3f139491fe2e68cd5ba78e3ad8

  • SSDEEP

    12288:CTgeIIGY8gGy4QmKrCc6XJvQOR9DHlXQeAs:OgeGYgyNrCc6ZvhDHlXV

Score
10/10
outsteelspywarestealer

Malware Config

Targets

    • Target

      6ee2fd3994acdbb9a1b1680ccd3ac4b7dcb077b30b44c8677252202a03dccf79

    • Size

      549KB

    • MD5

      d3d15e62d61981e85ae81ad54bd23b40

    • SHA1

      053d987ff528964bf18ffc1898acd678b8917dd7

    • SHA256

      6ee2fd3994acdbb9a1b1680ccd3ac4b7dcb077b30b44c8677252202a03dccf79

    • SHA512

      e3aded35c8474602e7ec556efdf2626a4d58f1b031c1eedbaf0f0c017c33eed607d3913138af52e8c8e408b75533a0e7ed4a5c3f139491fe2e68cd5ba78e3ad8

    • SSDEEP

      12288:CTgeIIGY8gGy4QmKrCc6XJvQOR9DHlXQeAs:OgeGYgyNrCc6ZvhDHlXV

    Score
    10/10
    outsteelspywarestealer

    • OutSteel

      OutSteel is a file uploader and document stealer written in AutoIT.

      stealeroutsteel

    • OutSteel batch script

      Detects batch script dropped by OutSteel

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks