S1017 OutSteel

malwareEnterprise

platformsWindows

also known asOutSteel

OutSteel is a file uploader and document stealer developed with the scripting language AutoIT that has been used by Saint Bear since at least March 2021.

techniques used (17)

ATT&CK techniques this enables or maps to.

T1005Data from Local System
T1020Automated Exfiltration
T1036.005Match Legitimate Resource Name or Location
T1041Exfiltration Over C2 Channel
T1057Process Discovery
T1059.003Windows Command Shell
T1059.010AutoHotKey & AutoIT
T1070.004File Deletion
T1071.001Web Protocols
T1083File and Directory Discovery
T1105Ingress Tool Transfer
T1119Automated Collection
T1204.001Malicious Link
T1204.002Malicious File
T1566.001Spearphishing Attachment
T1566.002Spearphishing Link
T1570Lateral Tool Transfer

used by groups (1)

Threat groups associated with this.

G1031Saint Bear

source

Where this definition is published.

view on ATT&CK

scry

Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan