General

  • Target
    ExploitPackv18.05.7z
  • Size 347.3MB
  • Sample261026-sada2stv3q
  • SHA256 2915cd15355f895f47ebbc6222ee833e11762c1b69e862a469a3ab5e137b4b65
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Language
  • ps1

Source
URLs
  • exe.dropper

    http://127.0.0.1/index.php?page=cart&action=show

  • exe.dropper

    http://127.0.0.1/index.php?page=main

Extracted

Language
  • ps1

Deobfuscated
Source
URLs
  • exe.dropper

    https://raw.githubusercontent.com/AbsoZed/SteamPrivEsc/master/nc.exe

  • exe.dropper

    https://raw.githubusercontent.com/AbsoZed/SteamPrivEsc/master/RegLN.exe

Targets

    • Target
      ExploitPackv18.05.7z
    • Size 347.3MB
    • SHA256 2915cd15355f895f47ebbc6222ee833e11762c1b69e862a469a3ab5e137b4b65
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Enterprise v16

Tasks