Overview

overview

8

Static

static

1

URLScan

urlscan

1

https://store.steamp...

windows11-21h2-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    https://store.steampowered.com/account/newaccountverification?stoken=62f0e3ea28ec920b9d9c71bd27a67b71a3d0396f69111a50a07b91a8f84faebb260e6c2e884da8b1b3dd750ad3dd82b5&creationid=5808682581890027541

  • Sample

    240828-22gbfsshnl

Score
8/10
steamdefense_evasiondiscoverypersistencephishing

Malware Config

Targets

    • Target

      https://store.steampowered.com/account/newaccountverification?stoken=62f0e3ea28ec920b9d9c71bd27a67b71a3d0396f69111a50a07b91a8f84faebb260e6c2e884da8b1b3dd750ad3dd82b5&creationid=5808682581890027541

    Score
    8/10
    steamdefense_evasiondiscoverypersistencephishing

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Detected potential entity reuse from brand steam.

      phishingsteam

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks