Overview

overview

8

Static

static

1

actions-st...-1.zip

windows11-21h2-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    actions-stuff-1-0-2-1.mcaddon

  • Size

    2.3MB

  • Sample

    241011-3smbsa1bqf

  • MD5

    3362f481551575a2555231eb625c190a

  • SHA1

    b56c4e3c2b69bb94091beb516ca4aab0202555c7

  • SHA256

    be6b033c2f14c2e6c7a8bcd171b3b93993fc5709bf22138d457988caa875c9c2

  • SHA512

    c3485815162828e8b1164a0f7dac41cd37563c02e5db79304caea5ec3b6f2ab7b67e010f525bd58a99188fc93d8b272945cd82937658f83b6cf4e1a37705083e

  • SSDEEP

    49152:kfg4S7AFtJFQ5AfSa3rO5r9qddJiyMLOvRVNOUUxuPFW6SY+G/B6vDdWQHvJk:5utDQmaa32MwOZixuPk6SY+BdWQPJk

Score
8/10
steamdefense_evasiondiscoverypersistencephishing

Malware Config

Targets

    • Target

      actions-stuff-1-0-2-1.mcaddon

    • Size

      2.3MB

    • MD5

      3362f481551575a2555231eb625c190a

    • SHA1

      b56c4e3c2b69bb94091beb516ca4aab0202555c7

    • SHA256

      be6b033c2f14c2e6c7a8bcd171b3b93993fc5709bf22138d457988caa875c9c2

    • SHA512

      c3485815162828e8b1164a0f7dac41cd37563c02e5db79304caea5ec3b6f2ab7b67e010f525bd58a99188fc93d8b272945cd82937658f83b6cf4e1a37705083e

    • SSDEEP

      49152:kfg4S7AFtJFQ5AfSa3rO5r9qddJiyMLOvRVNOUUxuPFW6SY+G/B6vDdWQHvJk:5utDQmaa32MwOZixuPk6SY+BdWQPJk

    Score
    8/10
    steamdefense_evasiondiscoverypersistencephishing

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Detected potential entity reuse from brand STEAM.

      phishingsteam
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks