Accepted 76561198064166553 (Шерхан |152rus|)

Accused:
| steamname: Шерхан |152RUS|
| steam3ID: [U:1:103900825]
| steamID32: STEAM_0:1:51950412
| steamID64: http://steamcommunity.com/profiles/76561198064166553
| customURL:
| steamrep: http://steamrep.com/profiles/76561198064166553

Target:
| steamname: аdvicebanana
| steam3ID: [U:1:23045495]
| steamID32: STEAM_0:1:11522747
| steamID64: http://steamcommunity.com/profiles/76561197983311223
| customURL: http://steamcommunity.com/id/advicebanana
| steamrep: http://steamrep.com/profiles/76561197983311223

What happened?
Said he needed another player for his team, linked me to a Teamspeak server with a malicious download disguised as an update.
The server: 89.108.87.54:10048
Analysis of the file:
https://www.virustotal.com/en/url/8...b7e77557d987b63aba7fc3b69742011203d/analysis/
https://www.virustotal.com/en/file/...42018baddf7a99328eabc23f9888631f229/analysis/

Screenshots:
http://files.f-o-g.eu/190a58
http://files.f-o-g.eu/5ef79e
http://files.f-o-g.eu/62df69
http://files.f-o-g.eu/dgcf0a

 

Accepted. Thanks.

Hidden Content:

**Hidden Content: Content of this hidden block can only be seen by members of (usergroups: Legacy Trade Moderator).**