e683b909867110383fbdf1196131c0ff92fa51ff9b411722a43cc643181f8a2e | Triage

Resubmissions

20-11-2024 18:13

241120-wtw42s1flm 6

20-11-2024 17:49

241120-wd2plavmfl 3

Sharing

General

Target

sample
Size

18KB
Sample

241120-wtw42s1flm
MD5

e71b95bdd688909e93401814d11d5a2e
SHA1

dc93caa18b6c59a892bd54671c858c6361c0b71a
SHA256

e683b909867110383fbdf1196131c0ff92fa51ff9b411722a43cc643181f8a2e
SHA512

e8c43c54f50170bd4581a8755203e1539df226106622db6d35b87492aacebffa501ae7f8b4f7569685fb57240c109f85be6320dfc82dbc53c8c2474113d70c9d
SSDEEP

384:9tTp1ocy4I4lbGaDMvhpNDabI/jlObz6r0sZYfw1xCejiw:9Np1ocy4HEagJpNWbzbz6r0sZOaxPiw

Score

6^/10

steam discovery motw phishing

Malware Config

Targets

- Target
  
  sample
- Size
  
  18KB
- MD5
  
  e71b95bdd688909e93401814d11d5a2e
- SHA1
  
  dc93caa18b6c59a892bd54671c858c6361c0b71a
- SHA256
  
  e683b909867110383fbdf1196131c0ff92fa51ff9b411722a43cc643181f8a2e
- SHA512
  
  e8c43c54f50170bd4581a8755203e1539df226106622db6d35b87492aacebffa501ae7f8b4f7569685fb57240c109f85be6320dfc82dbc53c8c2474113d70c9d
- SSDEEP
  
  384:9tTp1ocy4I4lbGaDMvhpNDabI/jlObz6r0sZYfw1xCejiw:9Np1ocy4HEagJpNWbzbz6r0sZOaxPiw
Score

6^/10

discovery steam motw phishing
- Mark of the Web detected: This indicates that the page was originally saved or cloned.
  phishing motw
- Detected potential entity reuse from brand STEAM.
  phishing steam
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

steamdiscoverymotwphishing