Overview

overview

8

Static

static

1

counter-st...s.html

windows7-x64

3

counter-st...s.html

windows10-2004-x64

8

Resubmissions

05-11-2024 18:09

241105-wrxmsswbkc 8

05-11-2024 18:07

241105-wqs8zsvnhv 3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    counter-strike-2-hacks

  • Size

    7KB

  • Sample

    241105-wrxmsswbkc

  • MD5

    135ba29c278e677fec446ac16eae20f4

  • SHA1

    37d4f3d0ae23139cee0fad123fe02de516031eee

  • SHA256

    ffd902ff33b4c5ab5c2365320ba4b436f8fb7b2dbe039d5ffc0af7da409a8f63

  • SHA512

    e84e3a37ef99239bd2ec14a5bd08f38dfef5d1892b1458d35f81e5150b6fa0479d2a57b0d435c68e4ec8b289460bb33ced69111cbed1fa132204e70b9c4d7042

  • SSDEEP

    192:PN2x2B6wLl8mYajrVy49cNqetNiw6IhkhMmOjy8N:AxvKl8za9y49cseqNK/3N

Score
8/10
steamdiscoverypersistencephishing

Malware Config

Targets

    • Target

      counter-strike-2-hacks

    • Size

      7KB

    • MD5

      135ba29c278e677fec446ac16eae20f4

    • SHA1

      37d4f3d0ae23139cee0fad123fe02de516031eee

    • SHA256

      ffd902ff33b4c5ab5c2365320ba4b436f8fb7b2dbe039d5ffc0af7da409a8f63

    • SHA512

      e84e3a37ef99239bd2ec14a5bd08f38dfef5d1892b1458d35f81e5150b6fa0479d2a57b0d435c68e4ec8b289460bb33ced69111cbed1fa132204e70b9c4d7042

    • SSDEEP

      192:PN2x2B6wLl8mYajrVy49cNqetNiw6IhkhMmOjy8N:AxvKl8za9y49cseqNK/3N

    Score
    8/10
    discoverysteampersistencephishing

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Detected potential entity reuse from brand STEAM.

      phishingsteam
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks