0eed67936b1d0006105308904728e7fb7e6fe5b45f4e8182a989c28ca4b33244 | Triage

Submit
Reports

Overview

overview

5

Static

static

1

SkyGoogle-...go.rtf

windows7-x64

4

SkyGoogle-...go.rtf

windows10-2004-x64

5

Sharing

General

Target

SkyGoogle-Game-PC-csgo.rtf
Size

749B
Sample

241009-nl3b4axgrg
MD5

a209ea1aed6f4cd7665b91dbc29e0796
SHA1

e2150a4f3ee85197af8b2b420c6f2a5d8ed2dc0f
SHA256

0eed67936b1d0006105308904728e7fb7e6fe5b45f4e8182a989c28ca4b33244
SHA512

d6cfdae686a70bfdea5a8ef7ade7227d2f57b4b3790ac6a320c5c1654133efb86f09146e399850be9df4a2edaa14ed7062cd3e373594934fe39c5f67a65a7311

Score

5^/10

steam discovery phishing

Static task

static1

Behavioral task

behavioral1

Sample

SkyGoogle-Game-PC-csgo.rtf

Resource

win7-20240903-en

windows7-x64

6 signatures

150 seconds

Behavioral task

behavioral2

Sample

SkyGoogle-Game-PC-csgo.rtf

Resource

win10v2004-20241007-en

steam discovery phishing

windows10-2004-x64

13 signatures

150 seconds

Malware Config

Targets

- Target
  
  SkyGoogle-Game-PC-csgo.rtf
- Size
  
  749B
- MD5
  
  a209ea1aed6f4cd7665b91dbc29e0796
- SHA1
  
  e2150a4f3ee85197af8b2b420c6f2a5d8ed2dc0f
- SHA256
  
  0eed67936b1d0006105308904728e7fb7e6fe5b45f4e8182a989c28ca4b33244
- SHA512
  
  d6cfdae686a70bfdea5a8ef7ade7227d2f57b4b3790ac6a320c5c1654133efb86f09146e399850be9df4a2edaa14ed7062cd3e373594934fe39c5f67a65a7311
Score

5^/10

discovery steam phishing
- Detected potential entity reuse from brand STEAM.
  phishing steam
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

steamdiscoveryphishing

© 2018-2024

Terms | Privacy