S1017Windows

S1017OutSteel

Platforms
1
ATT&CK
14.1
References
2

Description

[OutSteel](https://attack.mitre.org/software/S1017) is a file uploader and document stealer developed with the scripting language AutoIT that has been used by [Ember Bear](https://attack.mitre.org/groups/G1003) since at least March 2021.(Citation: Palo Alto Unit 42 OutSteel SaintBot February 2022 ) Documented platforms: Windows. Attributed to ATT&CK group: Ember Bear. Catalogued in ATT&CK 14.1. 2 references curated.

Platforms· 1

Windows

Attributed to1

TypeTargetConfidenceTier
GroupEmber Bearg1003100%live

References

  1. https://attack.mitre.org/software/S1017
  2. https://unit42.paloaltonetworks.com/ukraine-targeted-outsteel-saintbot/

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Software
Saint Bot
Software
AuTo Stealer
Software
Out1
Software
Action RAT
Software
Avenger
Software
down_new
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.