General
-
Target
DiscordSniper.exe
-
Size
57KB
-
Sample
211022-a33gjabaa8
-
MD5
df01a8c7077dbe40e68979f486ad29a7
-
SHA1
0f335a9a6ead9b8961a57bc724c93fb672ec14cb
-
SHA256
d361b54090cffa37e08b270d91a6fa1aec4f78347f38ba930328c84733a233cb
-
SHA512
ddca81cffd4abb81b405490f94e61a2c8a5f332796ad66e2f3b1add9d53138a55dc65a3c346e9eafa35fdd49f8035a75019988c6594f3d837cd6c006455d3601
Static task
static1
Behavioral task
behavioral1
Sample
DiscordSniper.exe
Resource
win7-en-20210920
Malware Config
Targets
-
-
Target
DiscordSniper.exe
-
Size
57KB
-
MD5
df01a8c7077dbe40e68979f486ad29a7
-
SHA1
0f335a9a6ead9b8961a57bc724c93fb672ec14cb
-
SHA256
d361b54090cffa37e08b270d91a6fa1aec4f78347f38ba930328c84733a233cb
-
SHA512
ddca81cffd4abb81b405490f94e61a2c8a5f332796ad66e2f3b1add9d53138a55dc65a3c346e9eafa35fdd49f8035a75019988c6594f3d837cd6c006455d3601
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-