2b4e72cae6a923a5b1edde1c8bc0e47d25e3506b69a14363295a248c8b05b587 | Triage

Sharing

General

Target

Rust Scripts Excel dml .exe
Size

124KB
Sample

241014-cyqnaa1ajq
MD5

4d894c11b710d9fe8de95e01d588692c
SHA1

f6aa2631924bf057fade84729dd98a286d99b61e
SHA256

2b4e72cae6a923a5b1edde1c8bc0e47d25e3506b69a14363295a248c8b05b587
SHA512

c963aaed40e4a7bebe8d0f90eda21a68ab96f9fadad70078b0b7747e9d7106f25ec430e7cf1419ecdafb4caddfd67edf69cfb1a24f231434ba8fb11e689709b9
SSDEEP

3072:YpzMJvf/O6974gOLThlg4JBZzNOcDjGx7h9QEmL9fYzU:uz+f/7gsq1NOcDyxbnmZfCU

Score

5^/10

steam discovery phishing

Malware Config

Targets

- Target
  
  Rust Scripts Excel dml .exe
- Size
  
  124KB
- MD5
  
  4d894c11b710d9fe8de95e01d588692c
- SHA1
  
  f6aa2631924bf057fade84729dd98a286d99b61e
- SHA256
  
  2b4e72cae6a923a5b1edde1c8bc0e47d25e3506b69a14363295a248c8b05b587
- SHA512
  
  c963aaed40e4a7bebe8d0f90eda21a68ab96f9fadad70078b0b7747e9d7106f25ec430e7cf1419ecdafb4caddfd67edf69cfb1a24f231434ba8fb11e689709b9
- SSDEEP
  
  3072:YpzMJvf/O6974gOLThlg4JBZzNOcDjGx7h9QEmL9fYzU:uz+f/7gsq1NOcDyxbnmZfCU
Score

5^/10

steam discovery phishing
- Detected potential entity reuse from brand STEAM.
  phishing steam
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

steamdiscoveryphishing

behavioral2