Community Enterprise Plans
Intel Exchange
Intel Exchange Detections
Resources
About
Leaderboard

Join Community Sign In

New Information Stealer - SamsStealer (By CYFIRMA)

Steven Lim@KQLWizard

•updated Jul 1, 2025•5•0•57

KQL Query

Microsoft Sentinel (KQL)

Tags

T1071.001 - Web Protocols T1027 - Obfuscated Files or Information T1036.005 - Match Legitimate Resource Name or Location T1070.004 - File Deletion TA0011 - Command and Control TA0005 - Defense Evasion S1029 - AuTo Stealer S1213 - Lumma Stealer T1598 - Phishing for Information TA0010 - Exfiltration T1020 - Automated Exfiltration T1567.004 - Exfiltration Over Webhook T1548.006 - TCC Manipulation T1021 - Remote Services M1034 - Limit Hardware Installation TA0043 - Reconnaissance TA0004 - Privilege Escalation TA0008 - Lateral Movement Network Connection HTTP Request File Event Malware Detected Windows Windows Defender Atpkql

Community Inspired.
AI Enhanced.
Better Detections.

Follow Us

Company

About
Leaderboard

Product

Community
Enterprise
Plans

© 2026 Copyright. All Rights Reserved.

Privacy Policy Terms of Service

Sign up to view this detection

or

Already have an account?