hxxps://store[.]steampowered[.]com/app/240/CounterStrike_Source/ | Triage

Submit
Reports

Overview

overview

7

Static

static

1

URLScan

urlscan

1

https://store.steamp...

windows7-x64

1

https://store.steamp...

windows10-1703-x64

1

https://store.steamp...

windows10-2004-x64

1

https://store.steamp...

windows11-21h2-x64

1

https://store.steamp...

android-10-x64

7

https://store.steamp...

android-11-x64

7

https://store.steamp...

android-13-x64

https://store.steamp...

android-9-x86

7

https://store.steamp...

macos-10.15-amd64

4

https://store.steamp...

debian-12-armhf

https://store.steamp...

debian-12-mipsel

https://store.steamp...

debian-9-armhf

https://store.steamp...

debian-9-mips

https://store.steamp...

debian-9-mipsel

https://store.steamp...

ubuntu-18.04-amd64

7

https://store.steamp...

ubuntu-20.04-amd64

7

Sharing

General

Target

https://store.steampowered.com/app/240/CounterStrike_Source/
Sample

240418-qr2nvsfe6x

Score

7^/10

android antivm collection discovery evasion linux macos spyware stealer

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

https://store.steampowered.com/app/240/CounterStrike_Source/

Resource

win7-20240221-en

windows7-x64

4 signatures

30 seconds

Behavioral task

behavioral2

Sample

https://store.steampowered.com/app/240/CounterStrike_Source/

Resource

win10-20240404-en

windows10-1703-x64

4 signatures

30 seconds

Behavioral task

behavioral3

Sample

https://store.steampowered.com/app/240/CounterStrike_Source/

Resource

win10v2004-20240412-en

windows10-2004-x64

4 signatures

30 seconds

Behavioral task

behavioral4

Sample

https://store.steampowered.com/app/240/CounterStrike_Source/

Resource

win11-20240412-en

windows11-21h2-x64

1 signatures

30 seconds

Behavioral task

behavioral5

Sample

https://store.steampowered.com/app/240/CounterStrike_Source/

Resource

android-x64-20240221-en

collection discovery evasion

android-10-x64

3 signatures

30 seconds

Behavioral task

behavioral6

Sample

https://store.steampowered.com/app/240/CounterStrike_Source/

Resource

android-x64-arm64-20240221-en

discovery evasion

android-11-x64

2 signatures

30 seconds

Behavioral task

behavioral7

Sample

https://store.steampowered.com/app/240/CounterStrike_Source/

Resource

android-33-x64-arm64-20240229-en

discovery evasion

android-13-x64

2 signatures

30 seconds

Behavioral task

behavioral8

Sample

https://store.steampowered.com/app/240/CounterStrike_Source/

Resource

android-x86-arm-20240221-en

discovery evasion

android-9-x86

2 signatures

30 seconds

Behavioral task

behavioral9

Sample

https://store.steampowered.com/app/240/CounterStrike_Source/

Resource

macos-20240410-en

macos-10.15-amd64

1 signatures

30 seconds

Behavioral task

behavioral10

Sample

https://store.steampowered.com/app/240/CounterStrike_Source/

Resource

debian12-armhf-20240221-en

debian-12-armhf

0 signatures

30 seconds

Behavioral task

behavioral11

Sample

https://store.steampowered.com/app/240/CounterStrike_Source/

Resource

debian12-mipsel-20240221-en

debian-12-mipsel

0 signatures

30 seconds

Behavioral task

behavioral12

Sample

https://store.steampowered.com/app/240/CounterStrike_Source/

Resource

debian9-armhf-20240226-en

debian-9-armhf

0 signatures

30 seconds

Behavioral task

behavioral13

Sample

https://store.steampowered.com/app/240/CounterStrike_Source/

Resource

debian9-mipsbe-20240226-en

debian-9-mips

0 signatures

30 seconds

Behavioral task

behavioral14

Sample

https://store.steampowered.com/app/240/CounterStrike_Source/

Resource

debian9-mipsel-20240226-en

debian-9-mipsel

0 signatures

30 seconds

Behavioral task

behavioral15

Sample

https://store.steampowered.com/app/240/CounterStrike_Source/

Resource

ubuntu1804-amd64-20240226-en

antivm spyware stealer

ubuntu-18.04-amd64

7 signatures

30 seconds

Behavioral task

behavioral16

Sample

https://store.steampowered.com/app/240/CounterStrike_Source/

Resource

ubuntu2004-amd64-20240221-en

antivm spyware stealer

ubuntu-20.04-amd64

7 signatures

30 seconds

Malware Config

Targets

- Target
  
  https://store.steampowered.com/app/240/CounterStrike_Source/
Score

7^/10

antivm spyware stealer collection discovery evasion
- Changes its process name
- Checks CPU information
  Checks CPU information which indicate if the system is an emulator.
  evasion discovery
- Checks memory information
  Checks memory information which indicate if the system is an emulator.
  evasion discovery
- Reads the content of photos stored on the user's device.
  collection
- Reads user data of web browsers
  Reads stored browser data which can include saved credentials.
  spyware stealer
- Checks CPU configuration
  Checks CPU information which indicate if the system is a virtual machine.
  antivm
- Reads CPU attributes
behavioral1 behavioral10 behavioral11 behavioral12 behavioral13 behavioral14 behavioral15 behavioral16 behavioral2 behavioral3 behavioral4 behavioral5 behavioral6 behavioral7 behavioral8 behavioral9

MITRE ATT&CK Matrix

Tasks

static1

urlscan1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

collectiondiscoveryevasion

behavioral6

discoveryevasion

behavioral7

discoveryevasion

behavioral8

discoveryevasion

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

antivmspywarestealer

behavioral16

antivmspywarestealer

© 2018-2024

Terms | Privacy