DiscordDeveloperUpdate.exe

General
Target

DiscordDeveloperUpdate.exe

Size

8KB

Sample

210926-qndgvsehe5

Score
6 /10
MD5

c9613a35a654572d3a60b87c1c85ff14

SHA1

b716cfb4988a3e884615bf929ecebeed52fe6708

SHA256

6abe1f3f2125d635acf5f867832e75129eb8c2b9ac76e5a9325ca08c7ef8e678

SHA512

978892e194f30e2e4f940ef0d88055a93dd4dcd35761bd26b9621247575932abd2ad7968914eb5b6fa28a6e1b90fb3c64280473f512f0e70bfcfb7971c1e9d5e

Malware Config
Targets
Target

DiscordDeveloperUpdate.exe

MD5

c9613a35a654572d3a60b87c1c85ff14

Filesize

8KB

Score
6 /10
SHA1

b716cfb4988a3e884615bf929ecebeed52fe6708

SHA256

6abe1f3f2125d635acf5f867832e75129eb8c2b9ac76e5a9325ca08c7ef8e678

SHA512

978892e194f30e2e4f940ef0d88055a93dd4dcd35761bd26b9621247575932abd2ad7968914eb5b6fa28a6e1b90fb3c64280473f512f0e70bfcfb7971c1e9d5e

Signatures

  • Looks up external IP address via web service

    Description

    Uses a legitimate IP lookup service to find the infected system's external IP.

Related Tasks

MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Tasks

                          static1

                          behavioral1

                          6/10

                          behavioral2

                          6/10