General

  • Target

    https://store.steampowered.com/

  • Sample

    250127-vxdlfazlfr

Malware Config

Targets

    • Target

      https://store.steampowered.com/

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Legitimate hosting services abused for malware hosting/C2

    • Detected potential entity reuse from brand STEAM.

MITRE ATT&CK Enterprise v15

Tasks