606b5a4eb438e7660e241a893e2cbef9d6c2c8a75271272349b6a6da745ed5fa | Triage

Submit
Reports

Overview

overview

7

Static

static

3

2025-03-31...om.exe

windows10-2004-x64

7

Sharing

General

Target

2025-03-31_d0cebe8b787581134ab7d6bdf194bd3b_black-basta_cobalt-strike_satacom
Size

15.5MB
Sample

250331-tl9ztswkx9
MD5

d0cebe8b787581134ab7d6bdf194bd3b
SHA1

85549c18184e072bd16ec1c12f01019e34801d0e
SHA256

606b5a4eb438e7660e241a893e2cbef9d6c2c8a75271272349b6a6da745ed5fa
SHA512

d25845fe627c032e91cb86428d3c08aa9ed081d30c1fff427369524fa617c28b3a5b8326b6b7406a782362d6074cf9f0688874e8a9d77ba943e86adf1ae81e5a
SSDEEP

393216:ycj5Ie1jAfLbZh0rhmk+1+TtIiW0VJWLlW30:Qe2erA1QtI2Ei

Score

7^/10

steam discovery phishing pyinstaller

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

2025-03-31_d0cebe8b787581134ab7d6bdf194bd3b_black-basta_cobalt-strike_satacom.exe

Resource

win10v2004-20250314-en

steam discovery phishing

windows10-2004-x64

13 signatures

150 seconds

Malware Config

Targets

- Target
  
  2025-03-31_d0cebe8b787581134ab7d6bdf194bd3b_black-basta_cobalt-strike_satacom
- Size
  
  15.5MB
- MD5
  
  d0cebe8b787581134ab7d6bdf194bd3b
- SHA1
  
  85549c18184e072bd16ec1c12f01019e34801d0e
- SHA256
  
  606b5a4eb438e7660e241a893e2cbef9d6c2c8a75271272349b6a6da745ed5fa
- SHA512
  
  d25845fe627c032e91cb86428d3c08aa9ed081d30c1fff427369524fa617c28b3a5b8326b6b7406a782362d6074cf9f0688874e8a9d77ba943e86adf1ae81e5a
- SSDEEP
  
  393216:ycj5Ie1jAfLbZh0rhmk+1+TtIiW0VJWLlW30:Qe2erA1QtI2Ei
Score

7^/10

steam discovery phishing
- Loads dropped DLL
- Detected potential entity reuse from brand STEAM.
  phishing steam
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

steamdiscoveryphishing

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.