MITRE ATT&CKsoftware (malware)
S1017 OutSteel
- Domain
- enterprise
- Platforms
- Windows
- Version
- 2.0
- Created
- 2022-06-09
Description
OutSteel is a file uploader and document stealer developed with the scripting language AutoIT that has been used by Saint Bear since at least March 2021.
Related
Uses · MITRE ATT&CK (17)
- T1059.010 AutoHotKey & AutoIT sub-technique
- T1071.001 Web Protocols sub-technique
- T1204.001 Malicious Link sub-technique
- T1204.002 Malicious File sub-technique
- T1570 Lateral Tool Transfer technique
- T1059.003 Windows Command Shell sub-technique
- T1566.001 Spearphishing Attachment sub-technique
- T1566.002 Spearphishing Link sub-technique
- T1036.005 Match Legitimate Resource Name or Location sub-technique
- T1070.004 File Deletion sub-technique
- T1005 Data from Local System technique
- T1020 Automated Exfiltration technique
- T1041 Exfiltration Over C2 Channel technique
- T1057 Process Discovery technique
- T1083 File and Directory Discovery technique
- T1105 Ingress Tool Transfer technique
- T1119 Automated Collection technique
Referenced by MITRE ATT&CK · uses (1)
- G1031 Saint Bear group
References
- https://unit42.paloaltonetworks.com/ukraine-targeted-outsteel-saintbot/ Palo Alto Unit 42 OutSteel SaintBot February 2022