Overview

overview

7

Static

static

3

AutoClicke...er.exe

windows10-ltsc 2021-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    AutoClickerMacroInstaller.exe

  • Size

    35.6MB

  • Sample

    250102-bw8kmsxrcr

  • MD5

    e58b8592727bc3a2624665906523eb92

  • SHA1

    cf18a71cb5fd3a01e73240ada785b6fcd0816d59

  • SHA256

    4a5d60132c36b86b08c0f3e0337433c3c1396d9272c850131c7340ce8a1a8977

  • SHA512

    463c55625998ee585f54562091944b2314ffc6fc5efc7882786207f709ee10bf4e80ea6c8998c5051a928b95aeb55801ff997b4dcee1d2fe8e162c6dcc41a993

  • SSDEEP

    786432:j03wciHAGYXzcv6x+bFCzDox1nz+h8ReVqnk1tlIeF:AgTHAGYC6xYg321n66AseDIeF

Score
7/10
steamdiscoveryphishingpyinstaller

Malware Config

Targets

    • Target

      AutoClickerMacroInstaller.exe

    • Size

      35.6MB

    • MD5

      e58b8592727bc3a2624665906523eb92

    • SHA1

      cf18a71cb5fd3a01e73240ada785b6fcd0816d59

    • SHA256

      4a5d60132c36b86b08c0f3e0337433c3c1396d9272c850131c7340ce8a1a8977

    • SHA512

      463c55625998ee585f54562091944b2314ffc6fc5efc7882786207f709ee10bf4e80ea6c8998c5051a928b95aeb55801ff997b4dcee1d2fe8e162c6dcc41a993

    • SSDEEP

      786432:j03wciHAGYXzcv6x+bFCzDox1nz+h8ReVqnk1tlIeF:AgTHAGYC6xYg321n66AseDIeF

    Score
    7/10
    steamdiscoveryphishingpyinstaller

    • A potential corporate email address has been identified in the URL: [email protected]

      phishing

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Detected potential entity reuse from brand STEAM.

      phishingsteam
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks